A large marketing company hires interns in the IT department. The interns should see only info from ChromeOS devices but should not be able to manage or update any device. How should an admin assign this role to interns?
A.
Create a custom services admin role and enable 2FA
B.
Create Custom role under Chrome management and assign Telemetry API role
C.
Create Custom role under Chrome management and assign Settings role
D.
Create Custom role under Chrome management and assign Manage ChromeOS devices role
B. Create Custom role under Chrome management and assign Telemetry API role
Here's why:
Custom Role: This is essential for granting granular, least-privilege access. Pre-built roles might provide too much or not exactly the right permissions.
Under Chrome management: This ensures the role is specific to ChromeOS device administration.
Assign Telemetry API role (or a similar "View ChromeOS Devices" / "Read ChromeOS Device Information" privilege):
The "Telemetry API" privilege typically grants read-only access to device information, attributes, and status. This is exactly what's needed for interns to see info without being able to manage or update.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
jaxclain
1 month ago