VMware Cloud Director Specialist (2022) — Question 66

What are the correct steps to grant the DevOps team permissions to a vSphere Namespace in a VMware Cloud Foundation (VCF) developer-ready workload domain while following the principle of least privilege access?

Answer options

• A. At the Permissions setting, add the DevOps group and assign the “Editor” permission
• B. At the Global Permissions setting, add the DevOps group and assign the vSphere Kubernetes Manager role
• C. At the Global Permissions setting, add the DevOps group and assign the SupervisorService Cluster Operator role
• D. At the Permissions setting, add the DevOps group and assign the “Can edit” permission

Correct answer: C

Explanation

The correct answer is C because the SupervisorService Cluster Operator role is specifically designed to provide the necessary permissions for managing Kubernetes workloads in a vSphere Namespace while maintaining least privilege access. Options A and D grant broader permissions than necessary, and option B assigns a role that does not align with the required access level for the DevOps team's tasks.