Managing User Accounts And Connections; User Roles; Learning About User Accounts - HP 3PAR StoreServ 7200 2-node Administrator's Manual

2 Managing User Accounts and Connections

Learning About User Accounts

In order to access an HP 3PAR storage system you must have a user account. Each HP 3PAR CLI
user is assigned a role, and each role is assigned a set of rights. The roles and rights assigned to
the CLI user determine which tasks the user can perform with a system. Assign roles to users based
on the tasks you intend the users to perform.
Eight roles are defined in the HP 3PAR CLI. See
There are four standard roles:
Browse
Edit
Super
Service
There are also four extended roles:
Create
Basic Edit
3PAR AO
3PAR RM
There is no functional difference between standard and extended roles. The extended roles define
a set of rights optimized for CLI users with specialized or restricted tasks. For example, assigning
a CLI user the Create role allows the user to create virtual volumes and other objects but does not
allow the user to remove virtual volumes. To maintain greater control over your system, assign CLI
users roles with the minimum set of rights they need to perform their tasks.
For procedures to create and remove user accounts, see
"Removing Users" (page
For information about viewing user roles and rights with the CLI see
Rights" (page
To view a list of roles and all of the rights assigned to the roles, see
Rights" (page
Table 2 HP 3PAR CLI User Roles

User Roles

Browse
Edit
Super
Service
Create
Basic Edit
16 Managing User Accounts and Connections
20).
17).
185).
Rights Assigned to Roles
Rights are limited to read-only access.
Rights are granted to most operations. For example, creating, editing, and removing virtual
volumes and other objects.
Rights are granted to all operations.
Rights are limited to operations required to service the system. Allows limited access to user
information and user group resources.
Rights are limited to creating objects. For example, virtual volumes, CPGs, hosts, and
schedules.
Rights are similar to the Edit role. For example, creating and editing virtual volumes and
other objects. The rights to remove objects are more restricted for the Basic Edit role than
the Edit role.
Table 2 (page 16) for a description of each role.
"Creating Users" (page 18) and
"Viewing User Roles and
"Mapping Roles and