Local User Authentication And Authorization; Ldap User Authentication And Authorization; Domain User Access - HP 3PAR StoreServ 7200 2-node Manual

Table 2 HP 3PAR OS User Roles (continued)
User Roles
3PAR AO
3PAR RM

Local User Authentication and Authorization

Users accessing the HP 3PAR storage system with the HP 3PAR CLI client or Secure Shell (SSH)
connections are authenticated and authorized directly on the system. These users are referred to
as local users. The information used to authenticate and authorize a local user is stored on the
system.
For instructions on creating a local user, refer to the HP 3PAR Command Line Interface
Administrator's Manual and the HP 3PAR Management Console Online Help.

LDAP User Authentication and Authorization

An LDAP user is authenticated and authorized using information from a Lightweight Directory
Access Protocol (LDAP) server. If multiple systems are configured to use the same LDAP server, a
user that can access one system can access all systems with the role and rights assigned to the
LDAP group.
Local user roles and rights are associated with an individual, LDAP user roles and rights are the
same for all members of the group. If you want to authenticate and authorize LDAP users with
different roles, you must create an LDAP group for each role.
For detailed information about LDAP users and LDAP connections, see
Protocol" (page
Command Line Interface Administrator's Manual.

Domain User Access

A domain user is a user with access to a specific domain. Local users belonging to a system using
HP 3PAR Virtual Domains Software are domain users. In addition to the user's roles and rights, a
domain users' activities are also limited to the domains to which they have access. A domain user's
assigned user role is applicable only within the domain to which the user has access.
For detailed information about virtual domains and domain users, see
(page 24). For instructions on creating a domain user, refer to the HP 3PAR Command Line Interface
Administrator's Manual and the HP 3PAR Management Console Online Help.
NOTE: Virtual domains require an HP 3PAR Virtual Domains Software license. For additional
information about the license, see
20). For instructions on setting up an LDAP connection, refer to the HP 3PAR
"HP 3PAR Software" (page
Rights Assigned to Roles
Rights are limited to internal use by HP for Adaptive
Optimization operations.
Rights are limited to internal use by HP for Recovery
Manager operations.
"Lightweight Directory Access
"HP 3PAR Virtual Domains"
9).
Local User Authentication and Authorization 19