City 311 helpdesk must view NSX objects without changing policy. Wh…

Question

City 311 helpdesk must view NSX objects without changing policy. Where in NSX Manager does the operator assign a read-only (auditor) role rather than relying on vSphere permissions alone?

Accepted Answer

System > Users and Roles, assigning Auditor or an equivalent read-only role — Letting 311 look but not touch is a badge in the NSX front office, not a firewall rule named ReadOnly. Assign Auditor (or similar) under System > Users and Roles.

Answer

Networking > NAT, because helpdesk users are represented as SNAT translations

Answer

Security > Distributed Firewall, creating a rule whose name is ReadOnly

Answer

Horizon entitlement, because NSX access is granted as a published desktop

City 311 helpdesk must view NSX objects without changing policy. Where in NSX Manager does the operator assign a read-only (auditor) role rather than relying on vSphere permissions alone?

Short Explanation

Full Explanation