Which action must be taken to meet these requirements?

A Cisco UCS user called "Employee1" accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies.

Which action must be taken to meet these requirements?
A . Modify the privilege level assigned to the user
B . Define a custom user role and assign it to users
C . Assign the user "Employee1" the network-operator role
D . Assign users to a specific Cisco UCS locale

View Answer

Answer: B

Explanation:

To prevent users from modifying root policies, the system administrator can define a custom user role and assign it to users. A custom user role can have specific privileges and scope of access that are different from the predefined user roles. For example, a custom user role can have read-only access to the root policies, but full access to the organization policies. By assigning this custom user role to users, the system administrator can ensure that only authorized users can modify the root policies, while still allowing users to manage their own organization policies. This way, the system administrator can avoid accidental changes to the boot policy or other root policies that can impact all service profiles and their storage connectivity.

Reference: = Implementing and Operating Cisco Data Center Core Technologies (DCCOR) v1.2, Module 5: Cisco

Unified Computing System, Lesson 5.2: Cisco UCS Manager Administration

[Cisco UCS Manager Administration Management Guide, Release 4.1], Chapter: User Management,

Section: Creating a Custom User Role

[Cisco UCS Manager GUI Configuration Guide, Release 4.1], Chapter: Managing Organizations and

Locales, Section: Creating an Organization