allowed to a particular user are determined by the user group or groups to
which the user belongs.
The Security Administrator assigns resource groups to user groups. A user
group might already be configured, or a new user group might be required
for certain resources.
Resource group assignments
All resource groups are normally assigned to the Security Administrator and
the Audit Log Administrator.
Each resource group has a designated Storage Administrator who can access
only their assigned resources and cannot access other resources.
All resource groups to which all resources in the storage system belong can
be assigned to a user group. Configure this in Device Manager - Storage
Navigator by setting All Resource Groups Assigned to Yes.
A user who has All Resource Groups Assigned set to Yes can access all
resources in the storage system. For example, if a user is a Security
Administrator (with View & Modify privileges) and a Storage Administrator
(with View and Modify privileges) and All Resource Groups Assigned is Yes on
that user account, the user can edit the storage for all the resources.
If allowing this access becomes a problem with security on the storage
system, then register the following two user accounts and use these different
accounts for different purposes.
• A user account for a Security Administrator where All Resource Groups
Assigned is set to Yes.
• A user account for a Storage Administrator who does not have all resource
groups assigned and has only some of the resource groups assigned.
Operations in a resource group for NAS modules
In the storage system in which the NAS module is installed, a resource group
for NAS is created with the name NAS_Platform_System_RSG. Resources in
NAS_Platform_System_RSG, such as LDEV format or delete, cannot be
operated. Therefore, move resources in NAS_Platform_System_RSG to a
different resource group before operating. For about operations for
NAS_Platform_System_RSG, contact customer support.
Resource group rules, restrictions, and guidelines
Rules
• The maximum number of resource groups that can be created on a
storage system is 1023. However, if the NAS module is installed in the
storage system, the maximum number of resource groups that can be
created on the storage system is 1022.
172
User administration
System Administrator Guide for VSP Gx00 models and VSP Fx00 models
Summary of Contents for VSP F400
Page 10: ...10 System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 16: ...16 Preface System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 210: ...210 User administration System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 244: ...244 Setting up security System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 256: ...256 Alert notifications System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 270: ...270 Managing license keys System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 386: ...386 System option modes System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 406: ...406 Glossary System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 412: ...412 Index System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...
Page 413: ...System Administrator Guide for VSP Gx00 models and VSP Fx00 models ...