Admin Domain Access Levels; Fabric With Ad0 And Ad255; Ad User Types - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

AD255
Figure 4

Fabric with AD0 and AD255

Admin Domain access levels

Admin Domains offer a hierarchy of administrative access. To manage Admin Domains, you must be a
physical fabric administrator. A "physical fabric administrator" is a user with the Admin role and access to
all Admin Domains (AD0 through AD255). Only a physical fabric administrator can perform Admin
Domain configuration and management.
Other administrative access is determined by your defined RBAC role and AD membership. Your role
determines your access level and permission to perform an operation. Your AD membership determines the
fabric resources that you can operate on.
Table 45 lists each Admin Domain user type and describes its administrative access and capabilities.
Table 45

AD user types

User type
Physical Fabric
Administrators
Administrative
Domain Users
AD1
AD0
AD2
Description
User account with Admin role and with access to all Admin Domains (AD0 through
AD255).
Create and manage all Admin Domains.
Assign other administrators or users to each Admin Domain.
Only a physical fabric administrator can create other physical fabric administrators.
Can be assigned to one or more Admin Domains.
Manage the resources within their Admin Domains.
If their role permits, can create user accounts and assign them to Admin Domains in
their list.
Cannot view other Admin Domain definitions. They can view only members of their
own Admin Domains.
Fabric OS 6.x administrator guide 147