HP 3PAR Service Processors - Manual (Page 46)

7.2 Policy Inheritance and Hierarchy
3PAR Secure Service Policy Manager User’s Guide
7.4 Working in the Pending Requests Tab 7.22
7.5 Working in the Audit Log Tab 7.24
7.1 Policy Inheritance and Hierarchy
3PAR Secure Service Policy Manager manages device policies and notification settings through
a hierarchy of groups and standard parent-child relationships. There is one global group,
named Global by default (this name can be changed). The Global group is a parent (or
grandparent, depending upon the child group's level in the hierarchy) group to all other
groups defined in Policy Manager. Within the Global group, there can be one or more
subgroups, or child groups, and devices.
Each device that registers with Policy Manager provides its model number, which is used to
create groups in Policy Manager. Within the Policy Manager application pages, you can rename
existing groups and create new groups.
X To view the Policy Manager groups, click Explore Device Groups. Each subgroup below
the Global group is considered another level in the group hierarchy as shown in Figure 7-1 .
Figure 7-1. Viewing Groups
In Figure 7-1 , Service Processor and Gateway Processor are child groups to Global. Any
permissions set in the Global group are inherited by its child groups. Within a child group's
policy you can override a permission set in the parent group if that permission is not locked
in the parent's policy. The overridden policy is then inherited by that child group and its
subgroups.
Group configuration settings also subscribe to this inheritance system with regard to
notifications. Notification settings for the Global group are inherited by the child groups of
that Global group. For each child group or device, you can override inherited permissions
and notification settings and add new permissions. Any new permissions or changed
permissions affect all child groups and related devices.