Account Authentication - HP Integrity Superdome 2 16-socket User Manual

Account classification
Partition management capabilities
User access to commands for managing the partition configuration and the partitions themselves
can be controlled through the Parcon_Admin access right and partition access assignments using
the ASSIGN PARCON_ADMIN and ASSIGN PARTITION commands. Access to ALL (current and
future) or individual partitions by partition ID may be assigned. The following table identifies the
operations accounts may use on assigned partitions based on privilege level.
Account classification
Administrator
Parcon Administrator
Partition Administrator
Partition Operator
Partition User

Account authentication

Local users
This is the default setting. Local user accounts are directly authenticated against a password
for each account stored on the active Onboard Administrator.
Account modifications are automatically synchronized between both Onboard Administrator
modules if two are present.
Local users might be disabled if LDAP is enabled, leaving the Administrator account as the
only local account that cannot be disabled.
Capabilities
own account
Can 'show' CLI commands
Partition capabilities
All commands available to Parcon
Administrator accounts
Manage the partition configuration
(create, modify, delete partitions)
All partition operations available to
Partition Administrator accounts
Access is always available to ALL
partitions
Restart the complex
Update partition firmware
All partition operations available to
Partition Operator accounts
Partition power and reset commands
Clear console logs
All partition operations available to
Partition User accounts
View partition and event logs
Connect to partition consoles
View partition status and info
Account name/privilege
level
Account name/privilege
level
Administrator/administrator
user name/administrator
user name/administrator
user name/operator
user name/user
Access level and privileges
Bays selected for
this account
Parcon_Admin
assigned
Yes
Yes
No
No
No
15