HP StorageWorks P9000 Command View Advanced Edition Suite Software 7.0.1 User Guide (TB581-96053, May 2011)

Managing users
This module describes how to manage users.
About managing users
Two built-in user accounts are automatically established when P9000 Command View AE Software
is installed. Note that Device Manager users must be registered and assigned to a user group. By
setting up resource groups and permissions (roles) for user groups, resource control can be performed
for users in the user groups. For other P9000 Command View AE Software products, the permitted
range of operations for each user can be limited by registering the user as a login user and setting
user permissions. The user management window makes it possible to manage user accounts that are
common to all P9000 Command View AE Suite products. Specifically:
• The System account (default password: manager) is used to manage P9000 Command View AE
Software operations and all P9000 Command View AE Software user accounts.
• The HaUser account (default password: haset) is the default user account used by P9000 Com-
mand View AE Software agents. The default permission for the HaUser account is Peer and the
PeerGroup is set for the HaUser account. The HaUser account belongs to PeerGroup as soon as
the installation completes. Only after installation, can the HaUser account be allocated to other
user groups.
You log in by using the System account to access the user management window and to manage user
access to storage systems registered in P9000 Command View AE Software.
You can also manage user accounts by linking to an external authentication server, such as an LDAP
directory server, RADIUS server, or Kerberos server. However, the built-in accounts (System and
HaUser) cannot be authenticated on an external authentication server.
The P9000 Command View AE Software user account used to connect to external authentication
servers and external authorization servers are managed as a Windows Active Directory (authorization)
group.
User permissions
You can assign the following permissions to a P9000 Command View AE Software groups:
• Admin: A user with Admin permission can register resources to be managed, change settings,
and view information. If the user is assigned to All Resources, the user can manage resource
groups.
• Modify: A user with Modify permission can register resources to be managed, change settings,
and view information.
• View: A user with View permission can reference managed resources.
• Peer: A user with Peer permission can access only Device Manager agents, and cannot log into
HP P9000 Command View Advanced Edition Suite products by using the browser. A resource
group cannot be assigned to users that have the Peer permission.
NOTE:
Peer permission cannot be assigned in combination with any user permission level other than User
Management.
User Guide 73