HP XP Array Manager Software - Manual (Page 75)

Storage Manager CLI operations, permissions must be set for each user, and not by assigning roles
to a user group.
The table below describes the types of roles and the operations that can be performed when those
roles are assigned.
By specifying roles, resources that belong to a resource group for which a user has permission to
reference or operate on are displayed. The user can perform operations or reference information for
the displayed resources.
Roles can be set for an external authentication group, just like for other user groups, when the external
authentication group is used as a user group. By default, the View role for All Resources is set.
Table 6 User permissions by role
Tiered Storage Manager Tasks Device Manager Tasks Role
The user can create, edit, and delete tiers,
perform operations from the Mobility tab, and
perform migration tasks.
The user can register resources to be managed,
change settings, and view information.
If the user is assigned to All Resources, the user
can manage resource groups.
Admin
The user can create, edit, and delete tiers,
perform operations from the Mobility tab, and
perform migration tasks.
The user can register resources to be managed,
change settings, and view information.
Modify
The user can view (reference) information
about tiers, information in the Mobility tab,
and list migration tasks.
The user can view (reference) managed resources. View
Not applicable.
This role applies only to Device Manager agents
and cannot be assigned to resource groups.
The Peer role cannot be assigned in combination
with any permissions other than the User
Management permissions.
Peer
For XP7, granular roles are available and are referred to as custom roles. The Admin, Modify,
and View roles are broad in scope, while custom roles are more specific. When selecting permis-
sions for a user group associated with a default user group or user-defined resource group, multiple
custom roles can be selected in combination to determine user capabilities. For users assigned to
an All Resources built-in group, custom roles are not available as the built-in groups grant Admin,
Modify, or View permissions only.
Custom
Related topics
• Custom roles , page 75
• Required roles and resource groups by function , page 78
Custom roles
Custom roles provide granular permissions for performing general XP7 Command View AE tasks, as
well as additional tasks specific to HP XP7 Storage. The custom roles available include Storage,
Security, Audit Log, and Support roles.
The table below describes additional XP7 tasks (functions) and the required custom roles when selecting
System GUI from menus or application panes to open Remote Web Console.
User Guide 75