3PAR InForm® OS 2.2.4 Concepts Guide (320-200085 Rev B, March 2009)

5.5
Users and Domain Privileges
InForm OS Version 2.2.4 3PAR InForm OS Concepts Guide
5.3 Users and Domain Privileges
By default, users belonging to the Super user class have privileges over the entire system. Only
these users and users belonging to the Edit user class in the all domain can create and edit
CPGs, hosts, Remote Copy groups and assign CPGs and hosts to
specified domains.
Additionally, these users have access to all domains and their objects.
When setting up domains and users in the InServ system, some users may require access to
multiple domains with different user privileges. 3PAR domains allow users access to more than
one domain and a single user can be assigned different user classes in each domain.
For instructions on setting up domains and users, see the InForm OS CLI Administrator’s
Manual.
5.4 Object and Domain Association Rules
As explained earlier, domains contain basic objects such as CPGs, hosts, and Remote Copy
groups, and derived objects such as VVs, LDs, and VLUNs. Objects and their associations with
domains must adhere to the following rules:
■ Objects can belong to only a single or no domain.
■ Objects derived from a CPG inherit the domain of that CPG.
■ VVs can only be exported to hosts belonging to the VVs’ domain.
■ A VLUN inherits the domain of the VV and host from which it (the VLUN) was exported.
5.5 The Default and Current Domains
When initially created, a user is able to view and work on (depending on assigned user class)
objects in all assigned domains. For example, an edit level user assigned to Domains A and B
can view and work on objects in both Domains A and B (Figure 5-2). However, if it is apparent
NOTE: A user having privileges over multiple domains cannot perform intra-
domain operations between objects in different domains. Users can have
privileges to a maximum of 32 domains.