Parks seasonal kiosks should launch only a timekeeping application…

Question

Parks seasonal kiosks should launch only a timekeeping application and must not inherit payroll and HR. Which Access design meets that requirement?

Accepted Answer

Create a dedicated Access policy for the timekeeping application instead of reusing the all-staff policy. — A kiosk policy should be a single-ride ticket, not the all-staff season pass. Give timekeeping its own Access policy. Reusing payroll and HR on that kiosk is how a seasonal tablet opens the wrong doors.

Answer

Reuse the all-staff Access policy so kiosks inherit payroll, HR, and timekeeping together.

Answer

Assign every SaaS application in the tenant to the kiosk smart group and rely on users not opening the extras.

Answer

Use an NSX-T distributed firewall allow-any from the kiosk VLAN to the internet and skip Access.

Parks seasonal kiosks should launch only a timekeeping application and must not inherit payroll and HR. Which Access design meets that requirement?

Short Explanation

Full Explanation