Thank you
diagram and description make sense
So the SMcore Service on the Guest VM will still require access to the Storage SVM to initiate the snap as per a physical Server.
Therefore better to have separate SVMs for each environment and keep the access to the SVM management segregated