Which two functions related to permissions can be performed on the newly created Namespace?

A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload domains.

Which two functions related to permissions can be performed on the newly created Namespace? (Choose two)
A . Add permissions only from the vSphere.local domain.
B. Permissions can be set to either view or edit.
C. Add permissions to users from vCenter Single Sign-On identity sources.
D. Add a custom role to create more granular permissions.
E. Add permissions to local vSphere with Tanzu users only.

View Answer

Answer: C,D

Explanation:

A quote from reference [1] states that, "To add permissions to users or groups from vCenter Single Sign-On identity sources, the Tanzu Kubernetes cluster administrator can use either the vSphere Client or kubectl."

Another quote from reference [1] states that, "By default, a Tanzu Kubernetes cluster includes a set of predefined roles that provides granular permission control for Kubernetes objects. The predefined roles enable cluster groups to be created with specific permissions across the Kubernetes namespace hierarchy. Administrators can also create custom roles to provide more granular permission control that is specific to their organization’s requirements."

References: [1] Tanzu Kubernetes Cluster or Supervisor Cluster[1]: Which do I choose? – https://blogs.vmware.com/virtualblocks/2022/06/23/tanzu-kubernetes-cluster-or-supervisor-cluster-which-do-i-choose/