Which action completes LDAP integration for administration after creating a group that matches an LDAP group?

• A. Add users to the ADC group
• B. Bind a global policy
• C. Create a command policy for the group
• D. Enable LDAP on the ADC

Answer: (C)

LDAP-based admin access works by authenticating users against the directory and linking LDAP groups to administrator groups on the ADC. Once you’ve created a local ADC group that mirrors the LDAP group, you still need to define what that group is allowed to do. Creating and binding a command policy for the group precisely controls which CLI commands members can execute, turning the LDAP identity into a usable admin role with defined permissions. Without this policy, the group has no scoped privileges. Adding users to the ADC group isn’t the right step because LDAP handles membership; enabling LDAP on the ADC would have been done earlier; binding a global policy is too broad and wouldn’t tailor permissions to that specific group.