HP XP Command View Advanced Edition Software - Manual (Page 18)

Device Manager Operations 18
2 Device Manager Operations
This chapter describes Device Manager operations:
• User groups and user access levels (see section 2-1 )
• Storage management operations (see section 2-2 )
• Subsystem and volume configuration operations (see section 2-3 )
• Data management operations (see section 2-4 )
• Link-and-Launch operations (see section 2-5 )
• Report operations (see section 2-6 )
• System security operations (see section 2-7 )
2-1 User Groups and User Access Levels
Device Manager provides two sets of user groups: system and local. System users have access to all Device
Manager resources. Local users have access only to specific Device Manager resources. Device Manager also
provides three levels of user access, or user roles: system administrator, storage administrator, and guest.
Each user is identified by a user ID and password as a member of one user group with one user role.
The Device Manager system user groups are: admin, storageadmin, and guest. These pre-defined user groups
can only contain users of the designated role. The admin group contains only system administrators, the
storageadmin group contains only storage administrators, and the guest group contains only guest users. The
system user groups cannot be deleted.
Device Manager also allows you to define user groups tailored to your specific access requirements. Users
assigned to a user-defined user group can access and operate only the resources (logical groups, hosts,
LDEVs) assigned to the user group. The user-defined user groups can contain local users of each role. For
example, the Marketing group could contain local system administrators, local storage administrators, and local
guest users.
The Device Manager user roles are (see Table 2-1 ):
• System administrator and local system administrator. The system administrator is responsible for creating
and deleting user accounts and has access to all Device Manager functions, including storage
configuration and data management as well as user operations. The system administrator can control
access permissions for Device Manager users on an object-by-object basis, such as access to a logical
group, host, or LDEV.
The user within a user-defined user group whose assigned role is local system administrator has the
same operating permissions as the system administrator, but only for the resources that the user group
can access. The local system administrator can create or delete user accounts within a user group, and
configure other users within a user group.
• Storage administrator and local storage administrator. The storage administrator can perform all storage
configuration and data management operations, but cannot perform Device Manager user-management
operations such as creating or deleting user accounts.
The users within a user-defined user group whose assigned role is local storage administrator have the
same operating permissions as users whose role is storage administrator, but only for the resources that
the user group can access. Local storage administrators can create storage groups within a user group or
configure LUN security for storage.
• Guest and local guest. The guest user can view the resources that Device Manager manages, including
alerts and historical performance data collected by Device Manager, but does not have permission to
perform operations on resources by using Device Manager.
The users within a user-defined user group whose assigned role is local guest have view permissions for
the resources that the user group can access. A user whose role is local guest cannot view the storage
subsystem information, alerts, or reports.
See section 6-3 for instructions on performing user group operations. See section 6-2 for instructions on
performing user account operations.
Table 2-1 Device Manager User Roles
User Role Description
System Administrator Manages Device Manager user accounts and user groups.
Can access all Device Manager functions and resources.