Your Director of Security asks you to assign AOS-CX switch management roles to new employees based on their specific job requirements After the…

The question requires identifying the appropriate default management role for a user needing more than minimal read-only access but less than full administrative rights. In ArubaOS-CX, there are three pre-defined default roles: administrators, operators, and auditors. The administrators role was deemed inappropriate, implying the user needed fewer privileges. The operators role grants access to all show commands, allowing full visibility of the switch configuration and operational state, which aligns with the requirement of not being "limited to viewing nonsensitive configuration information." This role is the standard choice for monitoring and initial troubleshooting without permitting configuration changes. The other options listed are not default roles in AOS-CX.

A. sysadmin: This is not a pre-defined default management role in the ArubaOS-CX operating system.
C. helpdesk: This is not a pre-defined default management role in the ArubaOS-CX operating system.
D. config: This is not a pre-defined default management role in the ArubaOS-CX operating system.

1. ArubaOS-CX 10.12 Security Guide

Page 101

Chapter: "Role-based access control"

Section: "Default roles".

This section explicitly lists and describes the three default roles. It states

"The operators group... Members of this group have access to all show commands and some clear commands

equivalent to privilege level 1." This confirms the capabilities of the operators role. The document also confirms that sysadmin

helpdesk

and config are not default roles.

2. ArubaOS-CX 10.10 Security Guide

Page 97

Chapter: "Role-based access control"

Section: "Default roles".

This document provides the same definitions for the default roles. It defines the administrators role as having "full access to all switch features" (privilege 15) and the operators role as having access to "all show commands" (privilege 1)

reinforcing that operators is the correct step-down role from administrators for comprehensive monitoring.