User Management; Managing User Rights - VMware VSHIELD APP 1.0 Admin Manual

5

User Management

Security operations are often managed by multiple individuals. Management of the overall system is
delegated to different personnel according to some logical categorization. However, permission to carry out
tasks is limited only to users with appropriate rights to specific resources. From the Users section, you can
delegate such resource management to users by granting applicable rights.
User management in the vShield Manager user interface is separate from user management in the CLI of any
vShield component.
This chapter includes the following topics:

"Managing User Rights" on page 33

"Add a User" on page 34

"Assign a Role and Rights to a User" on page 34

"Edit a User Account" on page 34

"Delete a User Account" on page 35

Managing User Rights

Within the vShield Manager user interface, a user's rights define the actions the user is allowed to perform on
a given resource. Rights determine the user's authorized activities on the given resource, ensuring that a user
has access only to the functions necessary to complete applicable operations. This allows domain control over
specific resources, or system‐wide control if your right encompasses the System resource.
The following rules are enforced:

A user can only have one right to one resource.

A user cannot add to or remove assigned rights and resources.
Table 5-1. vShield Manager User Rights
Right
R
CRUD
Table 5-2. vShield Manager User Resources
Resource
System
Datacenter
Cluster
None
VMware, Inc.
Description
Read only
Read and Write
Description
Access to entire vShield system
Access to a specified datacenter resource
Access to a specified cluster resource
Access to no resources
5
33