HP Storage Provisioning Manager (SPM) version 2.3 User Guide

2. Click Create Role.
The Create Role dialog box appears.
3. Fill in the required information on each tab of the dialog box (Overview, Privileges, Users and
Groups, and Security), then click OK.
The new role appears in the Roles content pane.
To view, modify, or delete roles, see Managing roles.
Grant privileges
Privileges are granted to the roles contained within SPM. They are assigned on the Privileges tab.
To view current privileges assigned to a role, select a role from the list and click the Privileges tab.
A list of available privileges is provided in Table 1 (page 48).
Table 1 Privileges
DescriptionPrivilege
Grants a role the ability to loginLogin
Grants a role the ability to impersonate another userLogin On Behalf Of
Grants a role the ability to run advanced diagnosticsRun Diagnostic
Grants a role the ability to view reports associated with the overall usage of SPMView Reports
Grants a role the ability to import resourcesImport Resources
Grants a role the ability to assign privileges to other rolesAssign privileges
Grants a role the ability to skip internal recovery or exit manual recovery when SPM
is in recovery mode
Modify Recovery Mode
Forces service deactivation with offline resourcesForce Deactivation
Create security groups
As part of the default security configuration, a Root Security Group (parent) and Consumer Group
(child) are set up in the Security Groups content pane. You can use, change or extend this set as
desired.
NOTE: Use the predefined Matrix User Security Group to make resources (arrays, pools, volumes,
networks, templates) available to Matrix OE. When using Matrix organizations, additional SPM
Security Groups may be defined for each organization (and perhaps a Security Group for sharing
resources among organizations). For more information, see the Faster storage provisioning in the
HP Matrix Operating Environment white paper on the following website:
http://www.hp.com/go/matrixoe/docs
Creating security groups is handled in the Security Groups section of Administration.
1. In the Navigation tree select Administration→Security Groups.
The Security Groups page appears in the content pane.
2. Click Create Security Group on the bottom right.
The Choose Parent Security Group dialog box appears.
3. Select the appropriate parent group then click OK.
The Create Security Group dialog box appears.
4. Fill in the required information on each tab of the dialog box (Overview and Access Control)
then click OK.
The new security group appears in the Security Groups content pane.
48 Managing storage catalog entities