User-Defined Administrative Domains; System-Defined Administrative Domains; Ad0; Ad User Types - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Table 47 lists each Admin Domain user type and describes its administrative access and capabilities.
Table 47

AD user types

User type
Physical Fabric
Administrators
Administrative
Domain Users

User-defined Administrative Domains

AD1 through AD254 are user-defined Admin Domains. These user-defined Admin Domains can be created
only by a physical fabric administrator (see
information).
In Figure 5 on page 152, AD1 and AD2 are user-defined Admin Domains.

System-defined Administrative Domains

When you install Fabric OS 6.0.0, the switch enters AD-capable mode with domains AD0 and AD255
automatically created. AD0 and AD255 are special Admin Domains. AD0 and AD255 always exist and
cannot be deleted or renamed. They are reserved for use in creation and management of Admin Domains.

AD0

AD0 is a system-defined Admin Domain that, in addition to containing members you explicitly added
(similar to user-defined Admin Domains), contains all online devices, switch ports, and switches that have
not been assigned to any user-defined Admin Domain.
Unlike user-defined Admin Domains, AD0 has an implicit and an explicit membership list. User-defined
Admin Domains have only explicit members.
• The "implicit membership list" contains all devices, switch ports, and switches that have not been
assigned to any other Admin Domain.
Initially, the AD0 implicit membership list contains all devices, switch ports, and switches in the fabric.
This implicit membership list includes all AD-unaware switches and the devices attached to them. When
you explicitly create AD1 through AD254, the devices, switch ports, and switches used to create these
user-defined Admin Domains disappear from the AD0 implicit membership list.
• The "explicit membership list" contains all devices, switch ports, and switches that you explicitly add to
AD0 and can be used to force device and switch sharing between AD0 and other Admin Domains.
Explicit members can be added to AD0 using the ad
AD0 can be managed like any user-defined Admin Domain. The only difference between AD0 and
user-defined Admin Domains is the implicit membership list.
The implicit members of AD0 change dynamically as the membership of other Admin Domains changes.
The explicit members of AD0 are not deleted unless you explicitly remove them.
For example, if you explicitly add DeviceA to AD0 and it is not a member of any other Admin Domain,
then DeviceA is both an implicit and an explicit member of AD0. If you add DeviceA to AD2, then DeviceA
is deleted from the AD0 implicit membership list, but is not deleted from the AD0 explicit membership list.
If you then remove DeviceA from AD2, DeviceA is added back to the AD0 implicit membership list
(assuming DeviceA is not in any other Admin Domain).
When a new device is added to the fabric, it automatically becomes an implicit member of AD0 until it is
explicitly added to an Admin Domain.
154 Managing administrative domains
Description
User account with Admin role and with access to all Admin Domains (AD0 through
AD255).
Create and manage all Admin Domains.
Assign other administrators or users to each Admin Domain.
Only a physical fabric administrator can create other physical fabric administrators.
Can be assigned to one or more Admin Domains.
Manage the resources within their Admin Domains.
If their role permits, can create user accounts and assign them to Admin Domains in
their list.
Cannot view other Admin Domain definitions. They can view only members of their
own Admin Domains.
"Admin Domains and login" on page 155 for more
add command.
--