HP Matrix Operating Environment 7.2 Update 1 Infrastructure Orchestration User Guide

Configuring infrastructure orchestration users in Windows
The Insight Management Installer adds the user who performed the installation to the
HPIO_Administrators group.
To integrate Active Directory with Insight Management:
1. Ensure that the server hosting the CMS belongs to the Active Directory domain (not a
workgroup).
2. Create a non-administrator user in Active Directory that will be used to run all Insight
Management services.
3. Give that Active Directory user Admin privileges on the CMS.
4. Install the Insight Management DVD on the CMS as this Active Directory user.
• To add local users to infrastructure orchestration user groups, use computer management or
administrative tools. For example, in Windows Server 2008, select Start→Administrative
Tools→Computer Management, and expand Local Users and Groups.
• To add Active Directory users and groups to infrastructure orchestration user groups, use
computer management or administrative tools. For example, in Windows Server 2008, select
Start→Programs→Administrative Tools, and expand Active Directory Users and Computers.
Matrix infrastructure orchestration roles
There are three infrastructure orchestration roles at the Service Provider level. These classes are
represented as Windows user groups.
• HPIO_Users
Can log in to infrastructure orchestration self service portal
(https://<cms-name-or-ip>:51443/hpio/portal) and initiate requests for provisioning
using published templates. These requests require approval from an Adminstrator.
• HPIO_Architects
Have the privileges of the HPIO_Users group, and can access the infrastructure orchestration
designer (https://<cms-name-or-ip>:51443/hpio/designer) to create, modify,
and publish templates.
• HPIO_Administrators
Have the privileges of the HPIO_Architects group. Can initiate requests without requiring
approval; modify infrastructure orchestration configuration items; configure networks and
pools; grant users access to existing resources; and approve, reject, continue, or cancel
requests.
Can access the infrastructure orchestration console through Systems Insight Manager.
Can log in to infrastructure orchestration designer and the infrastructure orchestration self
service portal.
Can log in to the infrastructure orchestration organization administrator portal for any
organization, and the infrastructure orchestration self service portal for any organization.
Configuring infrastructure orchestration users in Windows 17