Fujitsu BS2000, Руководство пользователя

Страница: 302 / 374

Users Managing authorizations
300
U41855-J-Z125-3-76
12.1.1 Managing accounts
The administrator manages all accounts on the SE server or the SE servers of a
Management Cluster, with the exception of the service accounts. He/She creates new
accounts and changes or deletes existing accounts. There are local accounts and LDAP
accounts:
●
A local account is created on the MUs of the SE server configuration and is completely
managed in the SE Manager.
●
An LDAP account is created on an LDAP server and is also managed from there. For
an LDAP account, "Add new account" means that the account is released for usage on
the SE server and enables access to the SE Manager just like a local account. "Remove
account" means the account gets locked and is no longer available for use on the SE
server.
The local accounts
admin
for the administrator and
service
for Customer Support are
predefined and cannot be deleted.
As administrator you can create, modify and delete further accounts for the
administrator,
BS2000 administrator, operator, XenVM administrator
and
AU administrator
roles. You cannot
administer the
service
account (
Service
role).
You can also manage passwords and password attributes (e.g. validity time) for the local
accounts, see
section “Managing passwords” on page 303
As BS2000 administrator, operator, XenVM administrator or AU administrator you are
authorized to manage your own account, i.e. you can change the access password for your
local account yourself, see
section “Managing passwords” on page 303 .
A XenVM administrator has access to XenVM systems and to XenVM devices.
The operator obtains access to BS2000 systems and the corresponding BS2000 devices
only in accordance with his/her individual authorizations which are assigned by the
administrator, see section
“Managing access to the BS2000 console and dialog” on
page 307 .
On the
Accounts
tab you can create and manage accounts:
i
For the BS2000 administrator, operator, XenVM administrator and AU administrator
the functionality is limited to displaying his/her own account and changing the name
and comment.