Onboard new interns into vRealize Automation and assign the correct access. The Interns are split into two Active Directory groups, interns-group-a and interns-group-b. The interns-group-a group requires access to Cloud Assembly and the interns-group-b group requires access to Service Broker. The interns should be allocated the most restrictive access available.

Onboard new interns into vRealize Automation and assign the correct access. The Interns are split into two Active Directory groups, interns-group-a and interns-group-b. The interns-group-a group requires access to Cloud Assembly and the interns-group-b group requires access to Service Broker. The interns should be allocated the most restrictive access available.

2 Assist in resolving issues reported by the following users who do not have the correct access permissions in vRealize Automation. Each user should have the minimum permissions required to fulfill their role:

• A User with logon id [email protected] is only responsible for creating new and deploying from cloud templates in Cloud Assembly.

The following additional information is provided to help complete both tasks:

• IDM URL: https://identity-manager.corp.tocal/SAAS/admin or use bookmark

• IDM System Domain Username: admin

• IDM Admin Password: VMware1!

• AD Organization Unit ON: OU=lnterns.DC=corp.DC=local

• vRealize Automation URL: vr-automalion.corp.local

• Cloud Administrator Username: vca pad mm @corp. local

• Cloud Administrator Password: VMware1!

View Answer

Answer: To complete the tasks as a Cloud Administrator, follow these steps:

Task 1: Onboard New Interns into vRealize Automation

Log in to the Identity Manager (IDM) using the provided URL and credentials.

Navigate to Identity & Access Management.

Under Enterprise Groups, find and select interns-group-a and interns-group-b.

Assign interns-group-a with the role of Cloud Assembly User, which is the most restrictive access for Cloud Assembly.

Assign interns-group-b with the role of Service Broker User, which is the most restrictive access for Service Broker.

Ensure that the AD Organization Unit is correctly set to OU=Interns,DC=corp,DC=local for proper group synchronization.

Task 2: Resolve Access Permissions Issues

Log in to the vRealize Automation URL using the Cloud Administrator credentials.

Go to Identity & Access Management.

Locate the user with the logon id [email protected].

Assign this user the role of Cloud Assembly User to allow creating and deploying from cloud templates in Cloud Assembly.

Verify that the user has the minimum permissions required and does not have any additional roles that exceed their responsibility.

By following these steps, you should be able to onboard the interns with the correct access and resolve the access permissions issues for the specified user. Always ensure to adhere to the principle of least privilege, granting users the minimum level of access necessary to perform their roles.