Encryption User Privileges - Brocade Communications Systems Brocade BladeSystem 4/24 User Manual

Encryption user privileges

In the Management application, resource groups are assigned privileges, roles, and fabrics.
Privileges are not directly assigned to users; users get privileges because they belong to a role in a
resource group. A user can only belong to one resource group at a time.
The Management application provides three pre-configured roles:
•
•
•
Table 28
TABLE 28
Privilege
Storage Encryption
Configuration
Storage Encryption
Key Operations
Storage Encryption
Security
DCFM Professional Plus User Manual
53-1001774-01
Storage encryption configuration.
Storage encryption key operations.
Storage encryption security.
lists the associated roles and their read/write access to specific operations.
Read/Write
Enables the following functions from the Encryption Center dialog box:
•
Launch the Configure Encryption dialog.
•
View switch, group, or engine properties.
•
View the Encryption Group Properties Security tab.
•
View encryption targets, hosts, and LUNs.
•
View LUN centric view
•
View all re-key sessions
•
Add/remove paths and edit LUN configuration on LUN centric view
•
Rebalance encryption engines.
•
Decommission LUNs
•
Edit smart card
•
Create a new encryption group or add a switch to an existing
encryption group.
•
Edit group engine properties (except for the Security tab)
•
Add targets.
•
Select encryption targets and LUNs to be encrypted or edit LUN
encryption settings.
•
Edit encryption target hosts configuration.
Enables the following functions from the Encryption Center dialog box:
•
Launch the Configure Encryption dialog.
•
View switch, group, or engine properties,
•
View the Encryption Group Properties Security tab.
•
View encryption targets, hosts, and LUNs.
•
Initiate manual LUN re-keying.
•
Enable and disable an encryption engine.
•
Zeroize an encryption engine.
•
Restore a master key.
•
Edit key vault credentials.
Enables the following functions from the Encryption Center dialog box:
•
Launch the Configure Encryption dialog.
•
View switch, group, or engine properties.
•
View encryption targets, hosts, and LUNs.
•
Create a master key.
•
Backup a master key.
•
View and modify settings on the Encryption Group Properties
Security tab (quorum size, authentication cards list and system
card requirement).
•
Establish link keys for LKM key managers.
18
453