Your network contains an Active Directory forest named contoso.com. You install System Center
2012 Virtual Machine Manager (VMM) on a server named Server1. Users report that they fail to log
on to the Virtual Machine Manager Self-Service Portal (VMMSSP). You need to ensure that users can
log on to the VMMSSP. What should you do first?

A.
From Authorization Manager, create a role definition and a role assignment.

B.
From the Virtual Machine Manager command shell, run the New-SCUserRole cmdlet and the SetSCUserRole cmdlet.

C.
From Internet Information Services (IIS) Manager on Server1, modify the Authentication settings.

D.
From the VMM Administrator Console, run the Create Run As Account Wizard.

Explanation:
http://technet.microsoft.com/en-us/library/hh801722.aspx
The New-SCUserRole cmdlet creates a user role for a group of System Center Virtual Machine
Manager (VMM) users. You can create the following user roles: Delegated Administrator, Read-Only
Administrator, and Self-Service User. Only one Administrator role exists; you cannot create another
Administrator role or delete the existing one.
If you are a member of a Delegated Administrator user role, you can create a user role. However, the
scope of the new user role must be a subset of the scope of its parent user role.
After you create a user role, you can use the Set-SCUserRole cmdlet to rename the user role, to add
or remove members, and to add or modify the scope of objects that members
of the role can manage. For a self-service user role, you can specify which actions members of a selfservice user role can take on their virtual machines, and you can define a quota that limits the
number of virtual machines self-service users can create. Although you cannot create or remove the
Administrator role or limit its scope, you can use Set-SCUserRole to add or remove members to that
role.