Configure and manage vSphere Namespaces and Zones.

A platform engineer uses vCenter Single Sign-On access to a vSphere Namespace on a VCF 9.0 Supervisor. The engineer has Can Edit permission for this namespace and successfully lists its VKS Cluster resources. A Supervisor-context request to list Pods across all namespaces is denied. The engineer only needs to inspect resources in the assigned namespace. Which action uses the existing permission boundary appropriately?