HP StorageWorks Clustered File System 3.6.0 Windows Storage Server Edition Administration Guide (403103-005, January 2008)

Chapter 12: Configure Security Features 139
– Custom. Manipulate virtual hosts, service monitors, and device
monitors. Create affects the ability to create new application
objects. Modify affects the ability to change existing application
objects, including adding new servers to an object and rehosting
objects. Delete affects the ability to delete application objects.
– File Serving. Manipulate MxFS for CIFS application objects,
including Virtual File Services and Cluster File Shares. This
resource is available when MxFS for CIFS is installed. Create
affects the ability to create new application objects. Modify affects
the ability to change application objects. Delete affects the ability to
remove application objects.
– SQL. Manipulate SQL application objects including Virtual SQL
Services, MSSQL, MSDTC, and SQL instances. This resource is
available when MxDB for SQL Server is installed. Create affects the
ability to create new objects and to use the Multi-Node Installer for
SQL. Modify affects the ability to update existing application
objects including the maintain operation, the rehost feature, the
update feature of the Multi-Node Installer for SQL, and the SQL
Instance Aliasing service. Delete affects the ability to delete SQL
application objects.
Allow or Deny Rights
You can allow or deny rights as necessary for each role. A checkmark
indicates that the right is allowed. An X indicates that the right is denied.
Typically, the deny operation is used to exclude a user or group from a
particular right granted to a role to which the user or group belongs. For
example, a group might belong to a role that allows filesystem creation,
modification, and deletion; however, you do not want certain members of
the group to be able to delete filesystems. You would create a role just for
those users and deny the right to delete filesystems.
You can assign or deny rights for a role either manually or by using a
template.