Hitachi VSP F400, Руководство системного администратора, Страница: 150 / 414

Managing users, user groups, and accounts
This chapter describes how to define the users and user groups that will
manage your storage system.
User administration overview
Read and understand the following information before managing users or
user groups.
• When a user is assigned to multiple user groups, the user has the
permissions of all the roles in each user group that are enabled on the
resource groups assigned to each user group.
• If a user has All Resource Groups Assigned set to Yes, the user can access
all the resources in the storage system. For example, if a user is a security
administrator and a storage administrator and has all resource groups
assigned, the user can edit the storage for all the resources.
If this is an issue, the recommended solution is to register two user
accounts in the storage system and use the two accounts for different
purposes.
○
A security administrator user account that has All Resource Groups
Assigned set to Yes.
○
A storage administrator user account that has only some of the resource
groups assigned.
• For user groups whose roles are other than Storage Administrator, All
Resource Groups Assigned is automatically set to Yes. If you delete all the
roles except Storage Administrator, reassign resource groups to the user
group because All Resource Groups Assigned is automatically set to No.
Related tasks
• Changing assigned resource groups on page 166
Workflow for creating and managing user accounts
Administrators use Device Manager - Storage Navigator to create accounts
for all users. The following steps show a basic workflow:
• If an authentication server is used, connect the management clients to it.
An authentication server allows users to log in to Device Manager -
Storage Navigator with the same password as the one used for other
applications in a system.
• If an authentication server is not used, use a password dedicated to
Device Manager - Storage Navigator to log in. Whether to use the
authentication server can be specified for each user.
• Review Setting up authentication and authorization on page 224 for
information and instructions.
• Review Managing user groups on page 159 to understand the user groups
and roles you can assign new or existing users.
150 User administration
System Administrator Guide for VSP Gx00 models and VSP Fx00 models