Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Pure Storage FlashArray-Storage-Professional Exam - Topic 1 Question 12 Discussion

A FlashArray is set up with LDAP authentication. A user is a member of the groups associated with both Array Admin and Storage Admin.What experience is expected for the user?
A) User will have Array Admin permissions.
B) User will not be able to login.
C) User will have Storage Admin permissions.

Pure Storage FlashArray-Storage-Professional Exam - Topic 1 Question 12 Discussion

Actual exam question for Pure Storage's FlashArray-Storage-Professional exam
Question #: 12
Topic #: 1
[All FlashArray-Storage-Professional Questions]

A FlashArray is set up with LDAP authentication. A user is a member of the groups associated with both Array Admin and Storage Admin.

What experience is expected for the user?

Show Suggested Answer Hide Answer
Suggested Answer: A

Similar to the previous question regarding directory services, Pure Storage Purity OS handles Role-Based Access Control (RBAC) overlaps by granting the most permissive role available to the user.

When configuring LDAP or Active Directory authentication on a FlashArray, administrators map directory groups to specific FlashArray roles (Array Admin, Storage Admin, Ops Admin, Read Only). If a user happens to be a member of multiple LDAP groups that are mapped to different roles on the array, Purity evaluates all mapped roles and automatically assigns the user the highest level of privilege during their session.

Since 'Array Admin' has full administrative rights over the entire array (including hardware management, directory services configuration, and firmware upgrades) and sits higher in the hierarchy than 'Storage Admin' (which is restricted to provisioning and managing storage objects like volumes and hosts), the system will seamlessly grant the user Array Admin permissions.

Here is why the other options are incorrect:

User will not be able to login (B): Purity is designed to handle this exact scenario smoothly. It resolves the conflict by defaulting to the higher privilege, rather than throwing an error or denying access.

User will have Storage Admin permissions (C): The system does not default to the lowest privilege or restrict access when a higher-level group membership is present and valid.


Contribute your Thoughts:

0/2000 characters
Lawrence
3 days ago
Are you sure they get both? Sounds too good to be true!
upvoted 0 times
...
Frederick
9 days ago
Wait, how does LDAP even handle multiple group memberships?
upvoted 0 times
...
Gabriele
14 days ago
Definitely not option B, they can log in.
upvoted 0 times
...
Murray
19 days ago
I think they’ll have both permissions, right?
upvoted 0 times
...
Sean
24 days ago
User will have Array Admin permissions.
upvoted 0 times
...
France
29 days ago
I feel like I saw something about this in our study materials, and it suggested that the user would have Storage Admin permissions instead. But I can't recall the details clearly.
upvoted 0 times
...
Elroy
1 month ago
I’m a bit confused about how LDAP handles multiple group memberships. Could there be a chance the user just can't log in at all?
upvoted 0 times
...
Verlene
1 month ago
I remember a practice question where a user had conflicting roles, and it seemed like the higher privilege group took precedence. So, I might lean towards option A.
upvoted 0 times
...
Joni
1 month ago
I think the user should have Array Admin permissions since they are part of that group, but I'm not entirely sure how the system prioritizes roles.
upvoted 0 times
...

Save Cancel