7 setting access rights for all policy permissions, 3 working in the configuration tab, 1 creating new groups – HP 3PAR Service Processors User Manual

Page 59: Setting access rights for all policy permissions, Working in the configuration tab, Creating new groups

Advertising
background image

7.15

Working in the Configuration Tab

3PAR Secure Service Policy Manager User’s Guide

X

On the View or change the policy settings for <Group Name> page, click Reset to

Parent's Policy.

Any permission settings specific to the policy open in this page are removed. All permission

settings are replaced with those defined for the parent's policy. The next time the device

contacts the server, it receives this updated policy.

7.2.7 Setting Access Rights for All Policy Permissions

If you want to change the access rights for all permissions in a policy to a single right, perform

the following:

1

On the View or change the policy settings for <Group Name> page, select the Set All

Permissions check box.

2

Select an access right from drop-down list.

3

Click Done.

All permissions are set to a selected access right for the current policy only. This can be

useful if you need to prevent the Custodian from performing any actions for a period of

time; for example, while that device is in maintenance mode or you are troubleshooting a

problem.

When the devices for that policy are ready to resume normal policy management, clear the Set

All Permissions check box for that policy and click Done.

The Access Right column displays the previously defined access rights for all permissions in

that policy. The next time the device contacts the server, it receives the updated policy.

7.3 Working in the Configuration Tab

From the Configuration tab, you can create new groups, edit existing group configurations,

specify notification settings for a group, and delete groups from 3PAR Secure Service Policy

Manager.

7.3.1 Creating New Groups

When a device registers with Policy Manager, it specifies its model number. Each model

number is a separate group within the Policy Manager interface.

You can create new groups based on the security needs of your devices. For example, you may

want to create a group for highly-restricted devices and another group for devices that are not

Advertising