A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators require read-only access and the ability to enable and disable services and servers. Which built-in Command Policy permission level should be used?

A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators require read-only access and the ability to enable and disable services and servers. Which built-in Command Policy permission level should be used?

• A. Operator
• B. Read-Only
• C. Sysadmin
• D. Network

Answer: (A)

This question tests choosing a permission level that balances limited viewing with practical control over service and server state. The Operator level is designed for administrators who need to monitor and perform routine operational tasks without full administrative privileges. It provides read-only visibility plus the ability to manage the running state of services and servers (for example, starting or stopping services and enabling or disabling servers). This matches the requirement to have read-only access while still being able to control which services/servers are active. The Read-Only level would not permit starting or stopping services, making it too restrictive. The Sysadmin level would grant full control over the farm and configuration, which is more than what’s needed. The Network level is intended for network-related tasks and does not align with the requested scope. Therefore, the Operator level is the best fit.

This question tests choosing a permission level that balances limited viewing with practical control over service and server state. The Operator level is designed for administrators who need to monitor and perform routine operational tasks without full administrative privileges. It provides read-only visibility plus the ability to manage the running state of services and servers (for example, starting or stopping services and enabling or disabling servers). This matches the requirement to have read-only access while still being able to control which services/servers are active.

The Read-Only level would not permit starting or stopping services, making it too restrictive. The Sysadmin level would grant full control over the farm and configuration, which is more than what’s needed. The Network level is intended for network-related tasks and does not align with the requested scope. Therefore, the Operator level is the best fit.