HP Systems Insight Manager 5.3 with Update 1 Installation and Configuration Guide for Linux HP Part Number: 418811-005 Published: April 2009 Edition: 5.3.1

enables the user to run the associated set of tools on that system or systems that are members of the system
group.
IMPORTANT: Authorization for a toolbox can enable users with non-privileged access (for example, non-root
users or users that are not members of the Windows Administrators group) to run tools as root/administrator
or as another specified user. Be careful when granting users permission to run tools as root or administrator.
Consider all the capabilities given by a tool, above and beyond the capabilities it is designed for, before
you associate it with a toolbox.
Default toolboxes
The All Tools
toolbox
is a default toolbox installed with HP SIM. The All Tools toolbox provides complete
access to all tools for the authorized system or system group. When a tool is added to HP SIM, the tool is
automatically added to this toolbox. Tools cannot be removed from the All Tools toolbox, and the All Tools
toolbox cannot be deleted from HP SIM. If you do not want a user to have access to all available tools for
a specific system or system group, they should not be authorized for the All Tools toolbox on that system
or system group.
CAUTION: Users assigned to the All Tools toolbox on the
Central Management Server
can execute
commands as any user. Therefore, these users could grant the administrative rights user privilege to themselves.
The Monitor Tools
toolbox
contains tools that display the state of managed systems but not tools that
change the state of managed systems.
HP SIM can have up to 32 defined toolboxes, including the default toolboxes. All toolboxes other than All
Tools, Monitor Tools, Full rights, and Limited rights can be enabled, disabled, or deleted. You cannot
edit All Tools. You can edit Monitor tools.
User privileges
Administrative rights user
Administrative rights users
have been given special privileges to administer
the HP SIM software. Full rights users manage the following components:
Authorizations
Systems
System groups
Users
Toolboxes
Tools
In addition, full rights users maintain and back up the database and monitor the HP SIM audit log.
By default, root on a Linux CMS is assigned the administrative rights user privilege, but this permission can
later be revoked. This user is automatically authorized for the All Tools toolbox on all systems, including
the CMS. The
administrative rights user
privilege can be given to one or more users, and HP SIM requires
that at least one user is a administrative rights user.
Operator rights user
Operator rights users
have limited capability to configure the CMS. They have
permission to create, modify, and delete all reports and their own tools.
User rights user
User rights user
s cannot configure the CMS. Their ability to manage systems is based on
their authorizations.
Tools
Tools are applications, commands, or scripts that are launched from within HP SIM. You can add custom
tools to HP SIM and execute them across multiple systems simultaneously. Three types of tools are supported
in the HP SIM environment: Web tools, X Window tools, and command line tools.
Web tools must reside on a web server. The web server can be
running on the CMS or a managed system. HP SIM launches the
web tools
URL from a CLI or GUI. When a web tool is launched from the
command line, HP SIM opens a browser to display the tool. When
Tools 9