Administrator Guide
Data Collector User Management
Use the Data Collector to add users to and manage existing users on Unisphere Central.
Unisphere Central User Privileges
The Data Collector controls user access to Unisphere Central functions and associated Storage Centers based on the privileges assigned to
users: Reporter, Volume Manager, or Administrator. The following tables dene Unisphere Central user level privileges with the following
categories.
NOTE: Unisphere Central user privileges and Storage Center user privileges share the same names but they are not the same.
Storage Center user privileges control access to Storage Centers, and Unisphere Central users control access to Unisphere
Central functionality.
Administrator Privileges
The Administrator privilege level is the most powerful user prole in Unisphere Central.
An Administrator user has full access to all of the Unisphere Central features.
Volume Manager Privileges
The Volume Manager privilege level is similar to the Administrator level, but has more restrictions.
A Volume Manager user is able to view, manage, and add/create most objects in Unisphere Central. However, a Volume Manager user does
not have access to Data Collector properties.
Reporter Privileges
The Reporter privilege level is the most limited type of user in Unisphere Central.
A Reporter user can view most features of Unisphere Central. However, a Reporter user is not able to manage, create, or edit any feature.
In addition, a Reporter user cannot view SupportAssist properties, Data Collector properties, or Storage Proles.
NOTE
: A Unisphere Central Reporter user can map Storage Centers to other Reporter users if they have Unisphere Central
Reporter credentials.
Authenticating Users with an External Directory
Service
The Data Collector can be congured to authenticate Unisphere Central users with an Active Directory or OpenLDAP directory service. If
Kerberos authentication is also congured, users can log in with the Client automatically using their Windows session credentials.
Unisphere Central access can be granted to directory service users and groups that belong to the domain to which the Data Collector is
joined. For Active Directory, access can also be granted to users and groups that belong to domains in the same forest, as well as domains
that belong to forests for which one-way or two-way trusts are congured.
11
Data Collector User Management 223