Managing users, About managing users, User operation permissions – HP XP P9000 Command View Advanced Edition Software User Manual

Page 112: 112 user operation permissions

Advertising
background image

1.

For Java Web Start version 1.4.2 use Java Web Start Application Manager to clear the applic-
ation folder.

2.

For Java Web Start version 5.0 or 6.0 use the Java Control Panel to delete temporary internet
files.

3.

For the browser you are using, delete temporary internet files.

Managing users

This module describes how to manage users.

About managing users

Managing users by setting up resource groups and permissions (roles) for user groups allows resource
control to be performed for users in the user groups.

Two built-in user accounts are automatically established when HP StorageWorks P9000 Command
View Advanced Edition Suite is installed. Note that Device Manager (GUI and CLI) and Tiered Storage
Manager (GUI) users must be registered and assigned to a user group. For Tiered Storage Manager
(CLI) other Command View AE Suite products, the permitted range of operations for each user can
be limited by registering the user as a login user and setting user permissions. The user management
window makes it possible to manage user accounts that are common to all products. Specifically:

The System account (default password:

manager

) is used to manage Command View AE Suite

operations and all HP StorageWorks P9000 Command View Advanced Edition Suite user accounts.

The HaUser account (default password:

haset

) is the default user account used by Device Manager

agents. The default role for the HaUser account is Peer and the PeerGroup is set for the HaUser
account. The HaUser account belongs to PeerGroup as soon as the installation completes.

You log in by using the System account to access the user management window and to manage user
access to storage systems registered in Command View AE Suite.

You can also manage user accounts by linking to an external authentication server, such as an LDAP
directory server, RADIUS server, or Kerberos server. However, the built-in accounts (System and
HaUser) cannot be authenticated on an external authentication server.

The Command View AE Suite user account used to connect to external authentication servers and
external authorization servers is managed as a Windows Active Directory (authorization) group.

Permissions that are specified for authorized groups are also applied to users who belong to nested
groups.

User operation permissions

User permissions determine the scope of resources and operations a user can access or perform.

By specifying roles in Device Manager and Tiered Storage Manager (GUI), resources that belong to
a resource group for which a user has permission to reference or operate on are displayed. The user
can perform GUI operations or reference information for the displayed resources.

User Management permissions make it possible to log in to all Command View AE Suite products,
and allow for usage of the user management function and security management function for all
Command View AE Suite products. The User Management permissions also allow users to create user
groups for Device Manager and Tiered Storage Manager, and output user groups and user information
in CSV format. If the Admin permissions are assigned to All Resources, the User Management
permissions also enable users to assign resources and roles to user groups.

Setting up HP StorageWorks P9000 Command View Advanced Edition Suite

112

Advertising
This manual is related to the following products: