What role is required to edit access controls?

What role is required to edit access controls?

• A. Security Admin
• B. security_admin and elevated privileges
• C. Admin and Access Manager
• D. System Administrator

Answer: (B)

Editing access controls is a security-sensitive task. The Security Admin role grants access to security-related configuration objects, including ACLs, so you can manage who has access to what. However, the action of changing ACLs is guarded by elevated privileges, which must be activated to perform sensitive admin tasks. So, to edit access controls you need both the security_admin role and elevated privileges. This combination ensures only authorized admins can modify ACLs, providing proper governance. Other roles may not guarantee the elevated rights required, even if they include broad admin capabilities.

Editing access controls is a security-sensitive task. The Security Admin role grants access to security-related configuration objects, including ACLs, so you can manage who has access to what. However, the action of changing ACLs is guarded by elevated privileges, which must be activated to perform sensitive admin tasks. So, to edit access controls you need both the security_admin role and elevated privileges. This combination ensures only authorized admins can modify ACLs, providing proper governance. Other roles may not guarantee the elevated rights required, even if they include broad admin capabilities.