Managing users, About managing users, User operation permissions – HP XP Array Manager Software User Manual

Page 87: 87 user operation permissions

Advertising
background image

Clearing the cache when upgrading P9000 Command View AE Suite

Before upgrading P9000 Command View AE Suite, you must clear the cache for Java™ Web Start
and for your browser:

To clear these caches:

1.

Clear the cache for Java Web Start version 1.4.2 by clearing the application folder of the Java
Web Start Application Manager. For Java Web Start version 5.0 or 6.0, delete the Temporary
Internet Files by using the Java Control Panel.

2.

Clear the cache for the browser by deleting the Temporary Internet Files for the browser you are
using.

Managing users

This module describes how to manage users.

About managing users

Managing users by setting up resource groups and permissions (roles) for user groups allows resource
control to be performed for users in the user groups

Two built-in user accounts are automatically established when P9000 Command View AE Suite is
installed. Note that Device Manager (GUI and CLI) and Tiered Storage Manager (GUI) users must be
registered and assigned to a user group. For Tiered Storage Manager (CLI) other P9000 Command
View AE Suite products, the permitted range of operations for each user can be limited by registering
the user as a login user and setting user permissions. The user management window makes it possible
to manage user accounts that are common to all P9000 Command View AE Suite products. Specifically:

The System account (default password:

manager

) is used to manage P9000 Command View AE

Suite operations and all P9000 Command View AE Suite user accounts.

The HaUser account (default password:

haset

) is the default user account used by Device Manager

agents. The default permission for the HaUser account is Peer and the PeerGroup is set for the
HaUser account. The HaUser account belongs to PeerGroup as soon as the installation completes.

You log in by using the System account to access the user management window and to manage user
access to storage systems registered in P9000 Command View AE Suite.

You can also manage user accounts by linking to an external authentication server, such as an LDAP
directory server, RADIUS server, or Kerberos server. However, the built-in accounts (System and
HaUser) cannot be authenticated on an external authentication server.

The P9000 Command View AE Suite user account used to connect to external authentication servers
and external authorization servers is managed as a Windows Active Directory (authorization) group.

Permissions that are specified for authorized groups are also applied to users who belong to nested
groups.

User operation permissions

User permissions determine the scope of resources and operations a user can access or perform.

By specifying roles in Device Manager and Tiered Storage Manager (GUI), resources that belong to
a resource group for which a user has permission to reference or operate on are displayed. The user
can perform GUI operations or reference information for the displayed resources.

User Guide

87

Advertising