VMware VSHIELD APP 1.0.0 UPDATE 1 - API, Руководство администратора

Страница: 31 / 144

VMware, Inc. 31
5
Security operations are often managed by multiple individuals. Management of the overall system is
delegated to different personnel according to some logical categorization. However, permission to carry out
tasks is limited only to users with appropriate rights to specific resources. From the Users section, you can
delegate such resource management to users by granting applicable rights.
User management in the vShield Manager user interface is separate from user management in the CLI of any
vShield component.
This chapter includes the following topics:

“Managing User Rights” on page 31

“Add a User” on page 32

“Assign a Role and Rights to a User” on page 32

“Edit a User Account” on page 32

“Delete a User Account” on page 33
Managing User Rights
Within the vShield Manager user interface, a user’s rights define the actions the user is allowed to perform on
a given resource. Rights determine the user’s authorized activities on the given resource, ensuring that a user
has access only to the functions necessary to complete applicable operations. This allows domain control over
specific resources, or system-wide control if your right encompasses the System resource.
The following rules are enforced:

A user can only have one right to one resource.

A user cannot add to or remove assigned rights and resources.
User Management
5
Table 5-1. vShield Manager User Rights
Right Description
R Read only
CRUD Read and Write
Table 5-2. vShield Manager User Resources
Resource Description
System Access to entire vShield system
Datacenter Access to a specified datacenter resource
Cluster Access to a specified cluster resource
None Access to no resources