HP Storage Essentials V5.1 Installation Guide Second Edition (Linux Release) (T4283-96055, November 2006)

Managing Security286
To add a role:
1. Access Storage Essentials through one of the menu options, such as Options > Storage
Essentials > Email Settings.
2. In the upper-right corner, select Security > Roles.
3. Click the New Role button.
4. In the Role Name field, type a name for the role. For example: Quality Assurance.
The name can contain spaces, but it cannot be longer than 256 characters.
5. In the Description field, type a description for the role. For example: Role for those in quality
assurance.
You cannot type more than 1024 characters in the Description field.
6. Select an access level for each element type:
• Full Control - Lets you view and modify the record for the element (Asset Management tab)
and perform provisioning.
• Element Control - Lets you view and modify the record for the element (Asset Management
tab).
• View - Lets you view element properties.
For example, if a user belongs to a role that only lets you view the element properties on storage
systems, that user would not be allowed to perform provisioning on storage systems because
their role does not have the Full Control option selected for storage systems. That same role
could also have the Full Control option selected for switches, allowing the user to perform
provisioning for switches. Thus, the user would not be able to provision storage systems, but the
user would be able to provision switches.
7. Select the features you want a user to be able to access. For example, if you want a user to have
access to System Manager, select System Manager from the list.
8. Click OK.
Editing Roles
The software lets you modify the default roles and/or the roles you have created. See the topic,
”About the Security for the Management Server” on page 273 for more information about roles and
organizations.
Keep in mind the following:
• Only users belonging to the Domain Administrator role can modify roles.
• Domain administrators can change the user names and roles of other domain administrators,
but they cannot modify their own user name and roles while logged into the management
server. Domain administrators can also edit their full name, e-mail, phone, and other details, as
well assign and un-assign any organization.
• After you click the OK button in the Edit Role window, any users assigned to the role you edited
are logged out of the management server. Users see the changes when they log back into the
management server.