An administrator is managing user access in a VVF environment and needs to grant a security auditor read-only access to view network topologies and firewall configurations in NSX, without granting any permissions in vCenter Server. Where should this permission be assigned?
Trap 1: vSphere Client -> Host -> Configure -> Security Profile.
Host security profiles manage local ESXi firewall rules and services, not NSX manager user access.
Trap 2: SDDC Manager -> Administration -> IAM -> Role Mappings.
SDDC Manager IAM handles VCF infrastructure roles, not fine-grained NSX networking permissions.
- A
vCenter Server -> Administration -> Access Control -> Global Permissions.
Wait, global permissions apply across vCenter and associated inventory, but NSX RBAC is managed inside NSX Manager. Let's look at option C.
- B
vSphere Client -> Host -> Configure -> Security Profile.
Why wrong: Host security profiles manage local ESXi firewall rules and services, not NSX manager user access.
- C
NSX Manager -> System -> Users -> User Role Assignment.
NSX RBAC is managed directly within NSX Manager, allowing granular least-privilege access to networking components.
- D
SDDC Manager -> Administration -> IAM -> Role Mappings.
Why wrong: SDDC Manager IAM handles VCF infrastructure roles, not fine-grained NSX networking permissions.