You have a server named Server1.
You install the IP Address Management (IPAM) Server feature on Server1.You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers
that are managed by IPAM. The solution must use the principle of least privilege.
Which user role should you assign to User1?
A.
IP Address Record Administrator Role
B.
IPAM Administrator Role
C.
IPAM MSM Administrator Role
D.
IPAM DHCP Scope Administrator Role
Explanation:
IPAM ASM Administrators
IPAM ASM Administrators is a local security group on an IPAM server that is created when you install the
IPAM feature. Members of this group have all the privileges of the IPAM Users security group, and can
perform IP address space tasks in addition to IPAM common management tasks.
Note: When you install IPAM Server, the following local role-based IPAM security groups are created:
IPAM Users
IPAM MSM Administrators
IPAM ASM Administrators
IPAM IP Audit Administrators
IPAM Administrators
https://geekdudes.wordpress.com/2017/01/16/configure-role-based-access-control-for-ipam-on-windows-server-2016/
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn268500(v=ws.11)
I was thinking IPAM DHCP Scope Administrator was the answer.
From the comments of this question on briefmenow:
https://www.briefmenow.org/microsoft/which-user-role-should-you-assign-to-user1-2/
You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers that are managed by IPAM.
The Set Access Scope on DHCP Scopes is available within the following four roles
DNS Record Administrators Role
IP Address Record Administrator Role
IPAM Administrators
IPAM ASA Administrators
IPAM DHCP Administrators
IPAM DHCP Reservation Administrators Role
IPAM DHCP Scope Administrators
IPAM MSM Administrators
IPAM DHCP Scope Administrators would be the role with the least privileged, but its not an answer to you have to pick the next least privilege role
0
0