Software Owner manual

8. Under Select Systems:
a. CMS type roles: If you want these roles to apply to all VCEM pages, then select CMS.
b. Group type roles: Select Add, the select the VCEM VC Domain Group for which you want
to restrict access (for example, "vcdg-1") and click Apply. The selected VCEM VC Domain
Group will appear automatically in Select Toolbox(es). See Figure 27 for more information.
IMPORTANT: VCEM roles of type "Group" can only be applied to VCEM VC Domain
Groups as selected systems and VCEM roles of type "CMS" can only be applied to
"CMS" as selected systems. Otherwise the VCEM roles take no effect.
Figure 27 Add systems page
9. Click Apply.
When you log in to HP SIM using this OS user account VCEM applies RBAC based on the HP SIM
logged user and blocks some operations for the specific VC Domain Group resources based on
the VCEM RBAC rules. Table 13 summarizes all VCEM operations and RBAC privileges:
NOTE: In Table 13 (page 48) the ā€œxā€ means that VCEM allows that role to perform the operation.
The ā€œNā€ means that VCEM does not allow that role to perform the operation
Table 13 VCEM operations and RBAC privileges
VCEM user
(Read-only)
VCEM group
limited operator
VCEM group
operator
VCEM group
administrator
VCEM
administrator
VCEM operations
or VCEM roles
xxxxxList bays
xxxxxList profiles
xxxxxList jobs
48 Managing VC Domains