Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies.

The APIC is as follows:

✑ Tenant = TenantX

✑ Security Domain = Tenantx-SD ✑ User = X

The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain.

Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
A . shell:domains = TenantX-SD/fabric-admin/,common//read-all
B. shell:domains = TenantX-SD/tenant-admin
C. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
D. shell:domains = TenantX-SD/tenant-admin/,common//read-all

View Answer

Answer: D

Explanation:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_ 0100.html

Graphical user interface, text, application

Description automatically generated