Hitachi Command Suite 8 User Guide

Related references
•
Required roles and resource groups by function  on page 108
Changing the lock status of user accounts A user account can be locked or unlocked by an administrator.
Procedure 1. On the  Administration  tab, select Users and Permissions .
This will launch a user management window.
2. Click  Users , select the check box for the user whose lock status you
want to change.
3. Click  Lock Users  or Unlock Users .
A verification dialog box displays.
4. Click  Ok to lock or unlock the...

2.Select  Users folder, then select one or more users (using the checkbox)
whose authentication method you want to change, or click  Add User to
create a new account.Note:  When creating a new account, only the  User ID is required for
external authentication, and must match a user ID on the external authentication server. For a local (internal) account, a  User ID and
Password  are both required. When external authentication is available,
new user accounts created without a password value are...

registered on the external authorization server. In this case, user permissions
are specified for each group.
Prerequisites
• The HCS server must be linked to an external authentication (authorization) server. See the  Hitachi Command Suite Administrator
Guide .
• The HCS server must be configured to support group authentication, which activates the Groups folder in the GUI.
• The HCS user group must exist on the external authentication (authorization) server. It is recommended that domain and group...

Related concepts
•
About user accounts and controlling access to resources  on page 84
Related tasks
•
Configuring external authentication for users  on page 91
Related references
•
User ID and password policies  on page 87
Deleting user accounts If user accounts are no longer needed for accessing HCS, for example if users
leave the organization, you can delete the user accounts.
Procedure 1. On the  Administration  tab, select Users and Permissions .
2. Select  Users in the navigation pane, and then...

• Management of locations in an organizationA user group is a group of users who can access the same resources with the
same user permissions. Externally authenticated groups can also be used as user groups. When you assign resource groups and roles (user permissions, such as Admin, Modify, View or Custom) to a user group, resources are
consistently controlled for the users in that group.
When the storage system is Virtual Storage Platform G1000, you can use custom roles to specify one or more roles and...

Related references
•
Access control examples  on page 96
Access control examples The following examples show how resource groups can control access in a
Virtual Storage Platform G1000, Virtual Storage Platform, or Unified Storage VM system. One method for dividing resources would be by separating resources based on company location. For example, if you create resource
groups based on location, the administrators in each location are limited to using only the resources that have been assigned to them, and...

administrators to use only the resources assigned to them, while still allowingfor effective sharing of physical resources.
Related concepts
•
About resource groups  on page 97
•
About user groups  on page 102
•
About access control  on page 94
About resource groups Resources can be grouped by system resource types that include storage
system, parity groups, DP pools, LDEV IDs, and storage ports.
Note:  When DP pools are registered to resource groups, related DP pool
volumes and their LDEV IDs are also...

example, a user who is a member of one of the built-in user groups for AllResources has access to all storage systems.
• Default ResourceGroup is the name for default resource groups that are created as storage systems are discovered and registered. A user who is a
member of a user group in a default resource group has access to all of the storage system resources.
• Resource pool is another type of resource group. A resource pool is a resource group to which resources of a virtual storage machine in a...

Related references
•
Prerequisites for creating resource groups  on page 99
•
Access control examples  on page 96
Prerequisites for creating resource groups Resources can be grouped by system resource types that include storagesystems, parity groups, DP pools, LDEV IDs, and storage ports.
The following list identifies the conditions for creating a user-defined user
group for the Virtual Storage Platform, Virtual Storage Platform G1000, or Unified Storage VM.
All of the following resources can be set to...

Creating resource groupsUser created resource groups can be used to group system resource typesincluding storage systems, parity groups, DP pools, LDEV IDs, and storage ports.
Resource groups, which are user defined, can be created for the Virtual
Storage Platform, Virtual Storage Platform G1000, or Unified Storage VM.
Procedure 1. On the  Administration  tab, in the Administration  pane, select
Resource Groups .
2. Click  Create Resource Group .
3. Enter a name and description, and select the storage...