Hitachi Command Suite 8 User Guide

• From the Resource Groups  pane, select the resource group, and
click  Edit Resource Group .
• Click the resource group link, click  Actions and select  Edit Resource
Group .
3. You can modify the resource group name and description, but not the
storage system.
4. Modify the parity groups, DP pools, LDEVs, ports, or host groups to
reflect your access control requirements.Note:  To add or delete DP pool volumes, you must add or delete DP
pools.
5. Click  Submit  to register this as a task.
6. You can...

About user groupsA user group consists of one or more users having the same permissions
(role) for the same resources. An external authentication group can also be used as a user group. There are also built-in resource and user groups for
administrative convenience.
For a user group, one or more resource groups are added, and a role assigned for each resource group. The types of roles are:
• Admin
• Modify
• View
• Custom
User group members will be able to work with each resource group according
to the...

• Authorized groups that have been registered to Hitachi Command Suiteproducts can be used as user groups. Roles assigned to authorized groups
are also applied to users who belong to nested groups.
For a Virtual Storage Platform G1000, Virtual Storage Platform, or Unified Storage VM storage system, if different roles are set as follows, the role set
for each resource group is applied to all resource groups within the same
storage system.
• When multiple resource groups in the same storage system are...

• If the LDEV ID of a DP volume is assigned to a user, this user can view theDP pool to which the DP volume belongs and the DP pool volumes thatcompose the DP pool. If the LDEV ID of a DP pool volume is assigned to
this user, they can view the pool to which the DP pool volume belongs.
• If a parity group is assigned to a user, this user can view all volumes that belong to the parity group from a list of volumes that appears whendisplaying the parity group information. If a parity group is not assigned...

Table 4-2  User permissions by roleRoleDevice Manager TasksTiered Storage Manager TasksAdminThe user can register resources to be
managed, change settings, and view
information.
If the user is assigned to All Resources, the
user can manage resource groups.The user can create, edit, and delete
tiers, perform operations from the
Mobility tab, and perform migration
tasks.ModifyThe user can register resources to be
managed, change settings, and view
information.The user can create, edit, and delete
tiers,...

• Storage Administrator (Local Copy)• Storage Administrator (Remote Copy)
Storage, security, and audit log custom roles not in the list above are generally for tasks concerning the storage system as a whole, such assecurity and auditing. These roles are assigned to the VSP G1000 defaultresource group only.Note:  Custom roles cannot be assigned to users in the All Resources built-in
resource groups as these groups permit View, Modify, or Admin permissions only.
Table 4-3  Custom roles
Custom role...

Custom role (permission)Functions• Configuring settings for MP Blade• Deleting tasks and releasing exclusive locks of resources
• Completing SIMs
• Configuring attributes for ports
• Configuring LUN security
• Configuring Server Priority Manager
• Configuring tiering policiesSecurity Administrator (View & Modify)For global-active device:
• Setting the reserved attribute for a volume to be used in a global-active device pair
With the exception of user management, allows
management of encryption keys and...

Custom role (permission)Functionsconfigure the certificate. For details about this procedure, see the Hitachi Command Suite
Administrator Guide .
3. When a user account for logging in to the SVP or Command Control Interface (CCI) is
authenticated by HCS, if the user account created in HCS is assigned the Support Personnel
role, that user account be used to log in to the SVP and perform tasks.
4. When a user account for logging in to the SVP or Command Control Interface (CCI) is
authenticated by HCS, if...

• Volumes - global-active device pairs
• External Storage Systems
• Pools/Tiers
• File Servers • File Servers - HNAS
• File Servers - HDI and HNAS F
• Replication
• Virtual ID
• Mobility (migration)
• Resources of virtual storage machines • AnalyticsNote:  For custom roles, a hyphen (-) indicates that the task (function)
cannot be performed with a custom role.
Table 4-4  Required resource groups and roles for performing functions
FunctionResource Group
Required RolesAdmin, Modify, ViewCustom (VSP...

FunctionResource Group
Required RolesAdmin, Modify, ViewCustom (VSP G1000)Download related
programsAnyAdmin or ModifyOne of the following:
Storage Administrator
(Provisioning)
Storage Administrator
(Performance
Management)
Storage Administrator
(Local Copy)
Storage Administrator
(Remote Copy)
Storage Administrator
(Initial Configuration)
Storage Administrator
(System Resource
Management)Link and LaunchLaunch other HCS
products.Any
When starting Element
Manager, the resource
group to which the
target...