The security team requests the ability to log into VMware vCenter and review datacenter, cluster...

The security team requiresvisibility into vCenter configurationsbut must not make changes.

Best practice is tocreate an Active Directory or vCenter group, add the security users, and assign them theRead-Only roleat thedatacenter/cluster/networklevel.

This ensures each user logs in with unique credentials, maintaining accountability.

Why others are incorrect:

A. Share administrator@vsphere.local password→ Violates security best practices.

B. Create a single user and share credentials→ Still insecure, lacks unique audit trails.

C. Assign Network Administrator role→ Grants configuration permissions, not allowed.