EMC EMC Unity All Flash, Руководство по настройке безопасности

Страница: 14 / 70

Table 6 Local user roles and privileges (continued)
Task Operator Storage
administrator Administrator VM
administrator
Modify network settings x
Change management interface language x x x
View log and alert information x x x
View encryption status x x x
Perform encryption keystore, auditlog, checksum
backup x x
Establish VASA connections between vCenter and
the storage system x x
In the case of the VM Administrator role, once connection is established between the
vCenter and the storage system, a vCenter user will be able to view the subset of the
storage configuration and status which is relevant to that vCenter and its ESXi
servers. The vCenter user can view only that information which is allowed through the
vCenter access control mechanisms.
Note
You can change account roles in Unisphere by selecting Settings and, under Users
and Groups, select User Management
>
More Actions
>
Change Role. The
Unisphere Online Help provides more information.
NAT
NAT is not supported for local login through Unisphere to the storage system.
Unisphere command line interface (CLI)
The Unisphere CLI provides a command line interface for the same functionality
available through Unisphere.
Running the Unisphere CLI requires special storage system command line software.
You can download this software from the product page for your storage system on
EMC Online Support (
https://support.emc.com ).
Session rules
The Unisphere CLI client does not support sessions. You must use command line
syntax to specify the account username and password with each command that you
issue.
You can use the Unisphere CLI
-saveuser
command to save the access credentials
(username and password) for a specific account to a file in the secure lockbox that
resides locally on the host on which Unisphere CLI is installed. The stored data is only
available on the host where it was saved and to the user who saved it. After you save
the access credentials, the CLI automatically applies them to the specified storage
system destination and port each time you run a command.
Password usage
Authentication to the Unisphere CLI is performed in accordance with management
accounts created and managed through Unisphere. The same permissions that apply
Access Control
14 EMC Unity All Flash, EMC Unity Hybrid, EMC UnityVSA 4.0 Security Configuration Guide