HP Fabric OS v7.0.1, Administrator'S Manual

Page: 378 / 584

340 Fabric OS Administrator’s Guide
53-1002446-01
Administrative Domains overview
17
Table 61 lists each Admin Domain user type and describes its administrative access and
capabilities.
User-defined Admin Domains
AD1 through AD254 are user-defined Admin Domains. These user-defined Admin Domains can be
created only by a physical fabric administrator (refer to
“Admin Domain access levels” on page 339
for more information).
In Figure 51 on page 338, AD1 and AD2 are user-defined Admin Domains.
System-defined Admin Domains
AD0 and AD255 are system-defined Admin Domains. AD0 and AD255 always exist and cannot be
deleted or renamed. They are reserved for use in creation and management of Admin Domains.
AD0
AD0 is a system-defined Admin Domain. Unlike user-defined Admin Domains, AD0 has an implicit
and an explicit membership list. User-defined Admin Domains have only an explicit membership
list.
•
The implicit membership list contains all devices, switch ports, and switches that have not
been assigned to any other Admin Domain.
Initially, the AD0 implicit membership list contains all devices, switch ports, and switches in the
fabric. When you create AD1 through AD254, the devices, switch ports, and switches used to
create these user-defined Admin Domains disappear from the AD0 implicit membership list.
•
The explicit membership list contains all devices, switch ports, and switches that you explicitly
add to AD0 and can be used to force device and switch sharing between AD0 and other Admin
Domains.
AD0 is managed like any user-defined Admin Domain. The only difference between AD0 and
user-defined Admin Domains is the implicit membership list.
The implicit members of AD0 change dynamically as the membership of other Admin Domains
changes. The explicit members of AD0 are not deleted unless you explicitly remove them.
TABLE 61 AD user types
User type Description
Physical fabric
administrator User account with admin permissions and with access to all Admin Domains (AD0 through
AD255).
Creates and manages all Admin Domains.
Assigns other administrators or users to each Admin Domain.
The default admin account is the first physical fabric administrator.
Only a physical fabric administrator can create other physical fabric administrators.
Administrative
Domain users Can be assigned to one or more Admin Domains.
Manage the resources within their Admin Domains.
If their role permits, can create user accounts and assign them to Admin Domains in their list.
Cannot view other Admin Domain definitions. They can view only members of their own Admin
Domains.