The built-in auditors role is specifically designed for restricted access to AOS-CX auditing and logging functions. HPE Aruba Networking documents that users assigned to the auditors group have Web UI access only to the System > Log page. For REST API access, auditors are authorized to use GET only against the audit log (/logs/audit) and event log (/logs/event) resources, apart from the POST operations required for login and logout. Aruba Networking
This matches the scenario directly. The requested administrator must be able to inspect event-log information without receiving broader switch management or configuration privileges. The auditors role is therefore an application of least privilege: it provides precisely the logging visibility needed without exposing configuration-changing capabilities.
AOS-CX assigns the auditors role privilege level 19 and restricts CLI access to the auditor context. By comparison, administrators receive privilege level 15 and broad read/write access to switch resources, which would exceed this requirement substantially. Aruba Networking
The AOS-CX REST API documentation also confirms that a GET request against /logs/event retrieves event-log entries, exactly matching the resource specified in the question. Aruba Networking
Therefore, D. auditors is the appropriate default AOS-CX management role.
Study Guide Topics: AOS-CX RBAC, Built-In User Groups, Auditors Role, Web UI Permissions, REST API Authorization, Event and Audit Logs.
