HP XP Array Manager Software - Manual (Page 61)

• Reporting user, and user group information in CSV format
• Specifying security settings (such as locking an account)
Resource groups and User groups:
The resource group All Resources is a built-in group (created by default) and contains the built-in user
groups called AdminGroup, ModifyGroup, PeerGroup, and ViewGroup. Adding a user to ViewGroup
would allow a user to see all registered storage systems and related underlying detail such as parity
groups. Putting the user in ModifyGroup enables task related buttons and tasks listed under General
Tasks, allowing the user to work with resources. For these built-in groups a user can only be in one
group, so a user would have to be removed from ViewGroup, then added to ModifyGroup. Essentially,
as a member of an All Resources group, you have access to the Device Manager GUI and Tiered
Storage Manager GUI elements.
Additionally, each storage system has a Default ResourceGroup. If you have three registered storage
systems you would see three of these groups in addition to All Resources listed. This group is used to
provide Admin, Modify, or View permissions (roles) to one or more users in a user-defined user group
so they have access to the specific resources of the storage system. In other words, instead of placing
a user in the All Resources group, you can place them in one or more storage system resource groups
and narrow the scope of what they can view or manage. To do this, you must create a named
user-defined group and edit the resource group to add the user-defined group and one or more users,
whose permissions (roles) can be set independently as you add them. Additionally, if the default
resource group is for a HP XP7, you can select Custom roles which are more specific, such as roles
for provisioning, or copy pair management and tasks. Mulitiple roles can be combined.
For very specific control over access to resources, consider creating user-defined resource groups.
You can identify specific parity groups and LDEVs that members of your user-defined user group can
access. As with default resource groups, for a HP XP7, you can select Custom roles.
TIP:
For details about the required permissions for executing each command of the Tiered Storage Manager
CLI, see:
• HP XP7 Command View Advanced Edition Tiered Storage Manager CLI Reference Guide
Related topics
• Creating a user account , page 61
• User ID and password policies , page 62
Creating and managing user accounts
Create user accounts and assign permissions.
Creating a user account
All users not allowed to login with the System account require a user account for access to XP7
Command View AE.
A user account consists of general user profile information (User ID, Password, Full Name, E-mail,
and Description).
User Guide 61