HP Fabric OS 7.1.0, Administrator'S Manual

Page: 133 / 666

Fabric OS Administrator’s Guide 133
53-1002745-02
Chapter
5
Managing User Accounts
In this chapter
•
User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
•
Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
•
Local user account database distribution . . . . . . . . . . . . . . . . . . . . . . . . . . 140
•
Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
•
The boot PROM password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
•
Remote authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
User accounts overview
In addition to the default permissions assigned to the roles of root, factory, admin, and user,
Fabric OS supports up to 252 additional user accounts on the chassis. These accounts expand
your ability to track account access and audit administrative activities.
Each user account is associated with the following:
•
Admin Domain list — Specifies the Administrative Domains to which a user account is allowed
to log in.
•
Home Admin Domain — Specifies the Admin Domain that the user is logged into by default. The
home Admin Domain must be a member of the user’s Admin Domain list.
•
Permissions — Associate roles with each user account to determine the functional access
levels within the bounds of the user’s current Admin Domain.
•
Virtual Fabric list — Specifies the Virtual Fabric a user account is allowed to log in to.
•
Home Virtual Fabric — Specifies the Virtual Fabric that the user is logged into, if available. The
home Virtual Fabric must be a member of the user’s Virtual Fabric list. If the fabric ID is not
available, the next-lower valid fabric ID is used.
•
LF Permission List — Determines functional access levels within the bounds of the user’s
Virtual Fabrics.
•
Chassis role — Similar to switch-level roles, but applies to a different subset of commands.
NOTE
Admin Domains are mutually exclusive from Virtual Fabrics permissions when you set up user
accounts. You will need to set up different user accounts for each feature.
You cannot have Admin Domain mode and Virtual Fabrics mode enabled at the same time.
For more information about Admin Domains, refer to Chapter 17, “Managing Administrative
Domains” .
For more information about Virtual Fabrics, refer to Chapter 10, “Managing Virtual Fabrics” .