HP Storage Provisioning Manager (SPM) version 2.3 User Guide

8. On the Security tab, make any necessary changes. When all changes are complete, click
Apply.
If additional changes are required on other tabs, click the appropriate tab. When finished,
click OK.
Removing a network
Networks can be removed from the catalog if they do not contain zones on which a service depends
and if they do not contain endpoints on which any resource in SPM depends.
NOTE: If a network is being used to fulfill the requirements of a storage service, that service
becomes nonconformant if the network is removed from the SPM catalog. The service remains
nonconformant until the network is imported back into the SPM catalog, the service has been
reconfigured, and a new candidate has been selected and activated. Removing a network from
the catalog does not have any impact on the SAN it represents. Servers still have access to the
data.
To remove a network:
1. In the Navigation tree, select Networks.
The list of available networks appears in the content pane.
2. In the content pane, select the network by clicking in the row anywhere to the right of the
network name.
3. Click Network Actions then select the Remove Network option.
The Remove Network verification dialog box appears.
4. Click Remove Network in the verification box.
Managing security
The SPM storage catalog contains all the entities added to the catalog. This includes every service
template, storage service, array, storage pool, volume, network, role, and security group.
Every catalog entity is assigned to a single security group, which determines who has access (users,
groups, and roles) and for what purposes (create, update, etc.). Security groups can contain other
security groups as well, similar to how directories can contain other directories in a file system.
These contained security groups allow access rights to be inherited from the parent, while also
allowing for further modifications. By default, SPM includes a set of pre-configured security groups
that implement a security policy that meets the needs for most environments, though customizing
them is supported.
Create security roles
SPM includes a set of default security roles that handle simple scenarios. You can change or extend
this set as needed. The default roles include:
• Storage architect—Sets policy
• Storage administrator—Manages storage services and resource consumption
• Storage operator—Monitors storage services and resource consumption
• Consumer—Consumes storage services
NOTE: In addition to these roles, the following roles are defined in order to facilitate use of SPM
with Matrix OE: Matrix Architect, Matrix Administrator, Matrix Service and Matrix User.
Role creation is handled in the Roles section of Administration.
1. In the Navigation tree select Administration→Roles.
The Roles page appears in the content pane.
Managing security 47