HP Insight Management-Software - Manual (Page 46)

NOTE:
•
Create the VC Domain Groups, then define VCEM access to authorized users.
•
By default the OS administrator user account has VCEM administrator rights to all VCEM VC
Domain Groups.
•
A user account can be associated with different VC Domain Groups and have different
privileges for each of the groups. Likewise, a VC Domain Group can have different users
associated with it who have different privilege levels. For example, user JohnSmith can have
“VCEM Domain Group Administrator” privileges for the “HP-UX” VC Domain Group but be
limited to “VCEM Group Limited Operator” privileges in the “Linux-Servers” VC Domain Group.
It is also possible to assign other users with different privileges to conduct operations on the
“HP-UX” VC Domain Group. This way user RachelGreen could be assigned “VCEM Domain
Group Operator” privileges and user AdamWood could be assigned “VCEM Group Limited
Operator” privileges allowing them to perform only subsets of management operations on the
“HP-UX” VC Domain Group.
Table 12 Role-based privileges
Description Type Privileges
Provides read-only access to VCEM
pages. CMS VCEM User (read-only)
Enables you to perform some of the
tasks of the VC Domain Group Group VCEM Group Limited Operator
Operator role except for creating,
editing, or deleting a server profile.
Allows you to manage server profiles
in one or more specified VC Domain Group VCEM Domain Group Operator
Groups. Only server profile operations
in the specified VC Domain Group are
permitted.
Enables you to manage VC Domains
and server profiles in one or more Group VCEM Domain Group Administrator
specified VC Domain Groups. All
operations in the specified VC Domain
Group are permitted.
Provides access to all VCEM
operations. Group VCEM Administrator
To define RBAC to a specific VCEM VC Domain Group:
NOTE: You must have operating system administrator privileges to perform these steps
1. Create an Operating System account (for example "JohnSmith").
2. Browse to Systems Insight Manager Options
→Security→User and Authorizations screen.
3. Select the Users tab and click New.
4. Enter the same OS account name you created in Step 1 (JohnSmith).
5. Select the Authorizations tab and click New.
6. Under Select Users choose the user account you created in Step 1 (JohnSmith). See Figure 26
for more information.
46 Managing VC Domains