A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role
and scope could be used to meet this requirement?
A.
NSX Administrator role and Limit Access scope
B.
Security Administrator role and Limit Access scope
C.
NSX Administrator role and No restriction scope
D.
Security Administrator role and No restriction scope
For sure not B and D because Security Administrator cannot configure NSX edge devices.
Beetween A and C, probably C because is not possible to restrict the scope of NSX Administrator
https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-79F9067D-2F29-45DA-85C7-09EFC31549EA.html
13
5
Correct is:
-NSX Administrator role and No restriction scope
5
0
Looks like answer should be “NSX Administrator role and Limit Access scope”
Reason: If you look at the scope types, “Limit access scope” mean “Access to a specified Edge.”
The questions say “A user needs to be given the ability to make configuration changes on a *specific* NSX Edge device” not all NSX Edge devices
Thoughts?
1
1
nvm, I agree with -NSX Administrator role and No restriction scope
Reason: The Enterprise Administrator and NSX Administrator roles can only be assigned to vCenter users, and their access scope is global (no restrictions) as per https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-79F9067D-2F29-45DA-85C7-09EFC31549EA.html
2
0