Implementing Cisco Application Centric Infrastructure (DCACI) — Question 161

An engineer must configure a new local user inside a Cisco ACI. The new user must meet these criteria:
• Must be provided with complete read-only access to the tenant.
• Must be permitted to create and delete EPGs within a specific tenant.
• Must not be allowed to modify any other objects within that tenant.

The tenant and security domain association is already in place. Which configuration set configures the new tenant?

Answer options

• A. Create a new role with tenant-admin privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.
• B. Create a new role with tenant-epg privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role read-all with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.
• C. Create a new role with tenant-connectivity privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role access-admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.
• D. Create a new role with tenant-security privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role tenant-admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.

Correct answer: B

Explanation

Option B is correct because it specifies that the user has tenant-epg privileges, allowing the necessary permissions to create and delete EPGs while maintaining read-only access to other tenant objects. The other options either grant broader administrative privileges or do not align with the requirements for EPG management, making them inappropriate for the scenario.