Hitachi Virtual Storage Platform F400, System Administrator Manual

Page: 98 / 368

A user who has All Resource Groups Assigned set to Yes can access all resources in the
storage system. For example, if a user is a Security Administrator (with View & Modify
privileges) and a Storage Administrator (with View and Modify privileges) and All
Resource Groups Assigned is Yes on that user account, the user can edit the storage for
all the resources.
If allowing this access becomes a problem with security on the storage system, then
register the following two user accounts and use these different accounts for different
purposes.
■
A user account for a Security Administrator where All Resource Groups Assigned is set
to Yes.
■
A user account for a Storage Administrator who does not have all resource groups
assigned and has only some of the resource groups assigned.
Operations in a resource group for NAS modules
In the storage system in which the NAS module is installed, a resource group for NAS is
created with the name NAS_Platform_System_RSG. Resources in
NAS_Platform_System_RSG, such as LDEV format or delete, cannot be operated.
Therefore, move resources in NAS_Platform_System_RSG to a different resource group
before operating. For about operations for NAS_Platform_System_RSG, contact customer
support.
Resource group rules, restrictions, and guidelines
Rules
■
The maximum number of resource groups that can be created on a storage system is
1023. However, if the NAS module is installed in the storage system, the maximum
number of resource groups that can be created on the storage system is 1022.
■
A Storage Administrator with the Security Administrator (View & Modify) role can
create resource groups and assign resources to resource groups.
■
Resources removed from a resource group are returned to meta_resource.
■
Only a Security Administrator (View & Modify) can manage the resources in assigned
resource groups.
Restrictions
■
No new resources can be added to meta_resource and NAS_Platform_System_RSG.
■
Resources cannot be deleted from meta_resource and NAS_Platform_System_RSG.
■
LDEVs with the same pool IDs or journal IDs cannot be added to multiple resource
groups.
In the case of adding LDEVs that are used as pool volumes or journal volumes, add all
the LDEVs that have the same pool IDs or journal IDs by using a function such as sort.
Guidelines
■
If you are providing a virtual private storage system to different companies, you
should not share parity groups, external volumes, or pools if you want to limit the
capacity that can be used by each user. When parity groups, external volumes, or
pools are shared between multiple users, and if one user uses too much capacity of
the shared resource, the other users might not be able to create an LDEV.
Operations in a resource group for NAS modules
Chapter 4: User administration
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 98