IBM XIV STORAGE SYSTEM, User Manual

Page: 388 / 652

This command creates a new user group.
A user group is a group of application administrators who share the same set of
snapshot creation limitations. After user groups are created, the limitations of all
the users in a user group can be updated using a single command. These
limitations are enforced by associating the user groups with hosts or clusters.
Storage administrators create user groups and control the various application
administrator's permissions. Hosts and clusters can be associated with only a
single user group. When a user belongs to a user group that is associated with a
host, it is possible to manage snapshots of the volumes mapped to that host.
User groups have the following limitations:
v
Only users who are defined as application administrators can be assigned to a
group.
v
A user can belong to only a single user group.
v
A user group can contain up to eight users.
User and host associations have the following properties:
v
User groups can be associated with both hosts and clusters. This allows limiting
application administrator access to specific volumes.
v A host that is part of a cluster cannot also be associated with a user group.
v
When a host is added to a cluster the host's associations are broken. Limitations
on the management of volumes mapped to the host is controlled by the cluster's
association.
v
When a host is removed from a cluster, the host's associations become the cluster
's associations, this allows continued mapping of operations so that all scripts
continue to work.
Application administrator access level:
v The access_all parameter can be specified for application administrators only.
When it is specified, it means that the user has an application administrator
access level to all volumes, and can perform operations on all volumes and not
just a subset of the specific volume.
Example:
user_group_create user_group=ug1 ldap_role="App Admin 1" access_all=yes
Output:
Command executed successfully.
Access Control:
User Category Permission
Storage administrator Allowed
Storage integration administrator Disallowed
Application administrator Disallowed
Security administrator Disallowed
Read-only users Disallowed
Technicians Disallowed
382
IBM XIV Storage System User Manual