Nutanix Certified Associate Practice Exam

What is a possible reason why users are unable to log in to Prism Central despite correct AD settings?

1. A client chap certificate must also be added in PC.

2. The Local authentication type must be selected in PC.

3. A role mapping needs to be associated with the AD group.

4. The users must be added to the Domain Admins AD group.

The correct answer is: A role mapping needs to be associated with the AD group.

The reason users may be unable to log in to Prism Central despite having correct Active Directory (AD) settings often stems from the need for proper role mapping associated with the AD group. Specifically, role mapping ensures that users in an AD group have the appropriate permissions within Prism Central to access the system. When integrating with AD, it is crucial to assign roles within the Prism Central environment that correspond to the users’ needs. If role mapping has not been established, users may not receive the necessary privileges required to authenticate and log in, even if their AD credentials are valid. This is a foundational aspect of user management and access control in many systems, emphasizing the importance of ensuring that a defined role is linked to the relevant AD groups to enforce appropriate levels of access. Other factors, such as whether a client certificate or local authentication settings are required, do not impact the typical process of logging into Prism Central with AD credentials. Additionally, being part of the Domain Admins AD group is not a prerequisite for accessing Prism Central, as this could create unnecessary administrative overhead and security risks for standard users.