3PAR InForm® OS 2.2.4 Concepts Guide (320-200085 Rev B, March 2009)

5.2
Overview
3PAR InForm OS Concepts Guide InForm OS Version 2.2.4
In addition to the inherent security provided by this hierarchical user structure, finer grain
access control of the InServ system can optionally be achieved through the implementation of
3PAR Virtual Domains (domains).
Domains allows an administrator to create up to 1024 domains, or spaces, within an
InServ Storage Server, where each domain is dedicated to a specific application. A subset of the
InServ Storage Server users have varying privileges over the domains. The use of domains can
be useful in scenarios where a single InServ Storage Server is used to manage data from several
different independent applications (Figure 5-1).
Figure 5-1. Single Storage Server Managing Multiple Independent Applications
Each domain allows users with varying levels of accessibility to domain objects. A domain is
made of Common Provisioning Groups (CPGs), hosts, and Remote Copy groups, and derived
domain objects such as Virtual Volumes (VVs), Logical Disks (LDs), and volume exports (VLUNs).
Because objects are domain-specific, domain users cannot accidentally or deliberately export
VVs to hosts outside of their assigned domain.
InServ
Application A
(data source A)
Application B
(data source B)
Application C
(data source C)
Storage
Server
Domain A
Domain B
Domain C
NOTE: Remote Copy requires a 3PAR Remote Copy license. For additional
information about the license, see 3PAR Products, Features, and Licenses on
page 2.10.