Which statement best summarises correct permission design in Instana?
Select an answer to reveal the explanation.
Short Explanation
You want individual accounts, group-based permissions scoped to what teams own, and least privilege. That keeps attribution clean, makes the model maintainable, and limits damage from mistakes or compromised credentials.
Full Explanation
The correct approach is to give every person an individual account, assign permissions through groups scoped to what each team owns, and grant only the level of access the role requires. Individual accounts preserve attribution, groups make the permission model maintainable, and least privilege limits damage from mistakes or compromised credentials. Sharing administrative credentials within each team and auditing at the team level is wrong because team-level auditing cannot identify who acted. Granting broad access by default and restricting only after a problem is wrong because the exposure existed before the restriction. Deriving access from alert channels is wrong because notification subscriptions are not an authorization model. For the exam, state all three principles together.