Support for virtual media, Assigning policies to user groups – Raritan Computer CCA-0N-V5.1-E User Manual

Page 197

Advertising
background image

Chapter 10: Policies for Access Control

179

Support for Virtual Media

CC-SG provides remote virtual media support for nodes connected to
virtual media-enabled KX2, KSX2, and KX2-101 devices. For detailed
instructions on accessing virtual media with your device, see:

Dominion KX II User Guide

Dominion KSX II User Guide

Dominion KXII-101 User Guide

See

Adding a Policy

(on page 176) for details on creating policies to

assign virtual media permission to user groups in CC-SG.

Assigning Policies To User Groups

Policies must be assigned to a User Group before they take effect. Once
a policy is assigned to a User Group, the members of the group will have
their access governed by that policy. See

Users and User Groups

(on

page 156) for details on assigning policies to a user group.

If a user belongs to more than 1 group, the more permissive policy out of
the groups they are assigned to will apply to the user.

For example:

Policy 123: Allows access to servers 1 2 3.

Policy 456: Allows access to servers 4 5 6.

Group A: Group is assigned Policy123.

Group B: Group B is assigned Policy456.

User belongs to both Group A and B. This allows user access servers 1
2 3 4 5 6.

Then, create Policy Deny 1: Denies access to server 1.

Assign Policy Deny 1 to Group A. User will only have access to 2 3 4 5 6.

If Policy Deny 1 is switched from Group A to Group B, user has access
to 1 2 3 4 5 6.

Advertising