HP XP P9000 Command View Advanced Edition Software - Manual (Page 79)

4. From Domain-Name select the group that was just added and then click Change Auth.
5. Set the permissions for products.
6. Similarly, to set up Device Manager roles, open the Select Resource Groups window as you would
set up roles for normal user groups.
Controlling access to resources
This module describes how to control access to resources.
About controlling access
When a SAN environment is managed by storage administrators, resources are managed by resource
and user groups. This allows secure data handling in multi-tenant environments and more efficient
operations. Access control can be used for data center hosting services and managing departments
in a company.
A resource group is a group of similar storage system resources (storage systems, storage ports, LDEV
IDs, parity groups, etc.).
Three types of resource groups exist:
• All Resources is a resource group that includes all resources managed by . This group is automat-
ically created during installation.
• Default resource groups are resource groups created for each storage system and include all re-
sources in that storage system. This group is automatically created when a storage system is re-
gistered.
• User-defined resource groups are resource groups that the user can define under the HP Storage-
Works P9500 Disk Array and depend on the operating environment. Resources can be grouped
by parity group, LDEV ID, storage port, etc..
A user group is a group of users with the same permissions and range of access.
Externally-authenticated groups can also be used as user groups by assigning them to user groups.
When assigning resource groups and roles (collections of operation permissions such as Modify or
View) to a user group, resources can be controlled for the users in that group.
The resource group can be created in this configuration only when the storage system is HP
StorageWorks P9500 Disk Array. The following figure shows a typical scenario of user groups and
their associated permissions to access resources.
Physical configurations such as parity groups, and logical configurations such as LDEV IDs, can be
used to create resource groups. Resource groups can then be assigned to user groups.
User Guide 79