After the above procedures, the Storage Administrators in A and B divisions can access the resource
groups allocated to their own division.
Meta_resource
The meta_resource is a resource group comprised of additional resources (other than external
volumes) and the resources that exist on the storage system before the Resource Partition is installed.
By default, existing resources initially belong to the meta_resource group to ensure compatibility
with older software when a system is upgraded to include Resource Partition.
Resource lock
While processing a task on a resource, all of the resource groups assigned to the logged-on user
are locked for exclusive access.
A secondary window (such as the Basic Information Display) or an operation from the service
processor (SVP) locks all of the resource groups in the storage system.
When a resource is locked, a status indicator appears on the status bar. Click the
Resource Locked
button to view information about the locked resource.
User groups
User groups and associated built-in roles are defined in the SVP. A user belongs to one or more
user groups. Privileges allowed to a particular user are determined by the user group or groups
to which the user belongs.
The Security Administrator assigns resource groups to user groups. A user group may already be
configured, or a new user group may be required for certain resources.
See the HP XP7 Remote Web Console User Guide for more information.
Resource group assignments
All resource groups are normally assigned to the Security Administrator and the Audit Log
Administrator.
Each resource group has a designated Storage Administrator who can access only their assigned
resources and cannot access other resources.
All resource groups to which all resources in the storage system belong can be assigned to a user
group. Configure this in Remote Web Console by setting
All Resource Groups Assigned
to
Yes
.
A user who has
All Resource Groups Assigned
set to
Yes
can access all resources in the storage
system. For example, if a user is a Security Administrator (with View & Modify privileges) and a
Storage Administrator (with View and Modify privileges) and
All Resource Groups Assigned
is
Yes
on that user account, the user can edit the storage for all the resources.
If allowing this access becomes a problem with security on the storage system, then register the
following two user accounts and use these different accounts for different purposes.
•
A user account for a Security Administrator where
All Resource Groups Assigned
is set to
Yes
.
•
A user account for a Storage Administrator who does not have all resource groups assigned
and has only some of the resource groups assigned.
Meta_resource
31