Controlling access to resources, About access control – HP XP P9000 Command View Advanced Edition Software User Manual

Page 122

Advertising
background image

• If multiple DNs are listed, you can remove an entry with the "-" button
• Reset clears all DN entries

5.

From the Group List, click the Group Name link, then click Change Permission and set the Com-
mand View AE Suite permissions for the group (repeat this for each new group).

6.

Your groups will now be visible from the Administration tab, User Groups. You can affiliate the
groups with resource groups and roles, just like Command View AE Suite user groups. If you
delete external authentication groups from Users and Permissions at a later time, the groups are
also removed from the User Groups list.

On the next login attempt by each group member, the users login credentials (User ID and Password)
will be validated using the external authentication (authorization) server.

TIP:

To delete registered authorization groups, select the check boxes of the groups to be deleted, and
then click Delete Groups.

Controlling access to resources

This module describes how to control access to resources.

About access control

When a SAN environment is managed by storage administrators, resources are managed by resource
and user groups by the Device Manager and Tiered Storage Manager (GUI). This allows secure data
handling in multi-tenant environments and more efficient operations. Access control can be used for
data center hosting services and managing departments in a company.

A resource group is a group of similar storage system resources (storage systems, storage ports, LDEV
IDs, parity groups, etc.).

A user group is a group of users with the same permissions and range of access. Externally
authenticated groups can also be used as user groups. When assigning resource groups and roles
(collections of operation permissions such as Modify or View) to a user group, resources can be
controlled for the users in that group.

The resource group can be created in this configuration only when the storage system is P9500 Disk
Array. The following figure shows a typical scenario of user groups and their associated permissions
to access resources.

Setting up HP StorageWorks P9000 Command View Advanced Edition Suite

122

Advertising
This manual is related to the following products: