HP XP P9500 Storage User Manual

Page 44

Advertising
background image

Table 8 Roles, Permissions, and Capabilities (continued)

Capabilities

Permissions

Role


Configuring host groups, paths, and WWN

Configuring Auto LUN except splitting Auto LUN pairs when using
RAID Manager

Configuring access attributes for LDEVs

Configuring LUN security

Continuous Access Synchronous and ESAM operations in general*

Performance
management

Storage Administrator

Configuring monitoring

Starting and stopping monitoring

Local copy

Storage Administrator

Performing pair operations for local copy

Configuring environmental settings for local copy

Splitting Auto LUN V2 pairs when using RAID Manager

Remote copy operations in general*

Remote copy

Storage Administrator

Configuring SVP

View & Modify

Support Personnel

Normally, this role is for HP service representative.

Downloading dump files using the FD Dump tool.

Configuring the SVP

View & Modify

User Maintenance

Notes:

* Remote copy operations from Remote Web Console require all of the following roles:

For Continuous Access Synchronous or ESAM:

- Storage Administrator (System Resource Management) role

- Storage Administrator (Provisioning) role

- Storage Administrator (Remote Copy) role

For Continuous Access Synchronous for Mainframe, Continuous Access Journal or Continuous Access Journal Z

- Storage Administrator (System Resource Management) role

- Storage Administrator (Remote Copy) role

CAUTION:

If a user has All Resource Groups Assigned set to Yes, the user can access all the

resources in the storage system. For example, if a user is a security administrator and a storage
administrator taking care of some resources, have all resource groups assigned, and has roles of
Security Administrator (View & Modify) and Storage Administrator (View & Modify), the user can
edit the storage for all the resources. If this is a problem, the recommended solution is to register
the following two user accounts in Remote Web Console, and use these different accounts for
different purposes

A security administrator user account that has All Resource Groups Assigned set to Yes.

A storage administrator user account that does not have all resource groups assigned and
has only some of the resource groups assigned.

CAUTION:

For the user groups whose roles are other than the Storage Administrator, All Resource

Groups Assigned is automatically set to Yes. If you delete all the roles except the Storage
Administrator, reassign resource groups to the user group because All Resource Groups Assigned
is automatically set to No. To assign resource groups to the user group, see

Changing resource

groups assigned to a user group (page 54)

.

44

Setting up and managing user accounts

Advertising
This manual is related to the following products: