HP Management Integration Framework Administrator Guide (T5494-96539, October 2012)

Roles (Management Integration Framework specific)
The HP Management Integration Framework software automatically establishes relationships
between Management Integration Framework roles and OS user groups. Typical roles are shown
in the following table.
Typical functionPrivilegesRole
Persons responsible for
managing security for
storage applications
Manage securityHP Security Administrator
Persons responsible for
managing storage
Create, delete , view
storage resources
Storage Administrators
environments and storage
applications
Persons who only view
storage resources
View storage resourcesStorage Users
For more information regarding roles, see the HP Management Integration Framework Maintenance
and Service Guide.
Security integration
The Management Integration Framework security function includes: authenticating users, establishing
trust between Management Integration Framework components, grouping machines into
Management Groups, handling single sign-on and auditing.
The Management Integration Framework security component creates Management Groups. A
Management Group can be local to the machine that the security component is on, or it can include
other machines. The Management Group concept is very similar to network security domains.
Management Integration Framework security components locate each other using the Management
Integration Framework discovery registry and can replicate certificates to all member machines in
the Management Group. This allows services on other machines to access security credentials for
a service on another machine.
This approach allows Management Integration Framework capable applications to share a common
security model. This is possible even when the applications are on different machines, use different
operating systems, and are written in different programing languages.
A Management Integration Framework security component is included with each instance of
Management Integration Framework software.
Security configuration settings include:
Available OS security domains
Service (Management Integration Framework specific)
The term Management Integration Framework service refers to the Management Integration
Framework process which runs in the background on a Management Integration Framework server.
The Management Integration Framework service must be restarted to apply changes to a
Management Integration Framework configuration.
IMPORTANT: To avoid the possibility of interrupting storage related operations, HP recommends
that you carefully plan and coordinate restarting the Management Integration Framework service.
48 Management Integration Framework concepts