HP StorageWorks Fabric OS 5.3.x administrator guide (5697-0244, November 2009)

Fabric OS 5.3.0 administrator guide 61
3 Managing user accounts
This chapter provides information and procedures on managing authentication and user accounts.
Overview
Fabric OS provides two options for authenticating users—remote RADIUS services and/or the local switch
user database. Both options allow users to be centrally managed using the following methods:
• Local user database: Manually synchronize the local user database using the distribute command
to push a copy of the switch’s local user database to all other Fabric OS 5.2.x and higher switches in
the fabric.
• Remote RADIUS servers: Users are managed in a remote RADIUS server, all switches in the fabric
can be configured to authenticate against the centralized remote database.
Accessing the management channel
The total number of sessions on a switch may not exceed 32. Table 8 shows the number of simultaneous
login sessions allowed for each role.
Using role-based access control (RBAC)
Fabric OS 5.3.0 uses Role-Based Access Control (RBAC) to determine which commands a user can run.
Assign one of the Fabric OS predefined roles to a user, as shown in Table 9.
Table 8 Maximum number of simultaneous sessions
Role name Maximum sessions
User 4
Operator 4
SwitchAdmin 4
ZoneAdmin 4
FabricAdmin 4
BasicSwitchAdmin 4
SecurityAdmin 4
Admin 2
Table 9 Fabric OS 5.3.0 roles
Role name Version Duties Description
Admin All All administration All administrative commands.
SwitchAdmin 5.0.x and higher Local switch
administration
Most switch (local) commands,
excludes security, user management,
and zoning commands.
Operator 5.2x0 and higher General switch
administration
Routine switch maintenance
commands.
SecurityAdmin 5.3.0 Restricts security
functions
All switch security and user
management functions
ZoneAdmin 5.2.x and higher Zone administration Zone management commands only.
FabricAdmin 5.2.x and higher Fabric and switch
administration
All switch and fabric commands,
excludes user management and
Administrative Domains commands.