VMware VCENTER CHARGEBACK 1.5 - API, Manual

Page 1: ...k 1 5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition To check for more recent editions of this document...

Page 2: ...ware com Copyright 2010 VMware Inc All rights reserved This product is protected by U S and international copyright and intellectual property laws VMware products are covered by one or more patents li...

Page 3: ...Chargeback Application 28 Accessing the vCenter Chargeback Application 29 Data Collector 29 Uninstall vCenter Chargeback 37 3 Configuring Administration Settings 39 Activate the Application 39 Configu...

Page 4: ...orts 107 Generate a Cost Report 109 Generate a Usage Report 110 Generate Cost Comparison Report 112 Scheduling Report Generation 113 Managing Reports 118 Managing Archived Reports 121 Report Dashboard...

Page 5: ...ck vmware com Technical Support and Education Resources The following technical support resources are available to you To access the current version of this book and other books go to http www vmware...

Page 6: ...lp you assess plan build and manage your virtual environment To access information about education classes certification programs and consulting services go to http www vmware com services vCenter Cha...

Page 7: ...the complete IT operational costs In a virtual environment however the task of calculating the IT operational cost for each department becomes very difficult Multiple virtual machines run on a physic...

Page 8: ...s vCenter Chargeback is an end to end cost reporting solution for virtual environments that use VMware vSphere This Web based application interacts with the vCenter Server Database to retrieve usage i...

Page 9: ...ormation from the vCenter Chargeback database along with the cost model and chargeback cost calculation formulas to generate the cost reports A single data collector instance can communicate with mult...

Page 10: ...vCenter Chargeback User s Guide 10 VMware Inc...

Page 11: ...ter Chargeback Application on page 28 n Accessing the vCenter Chargeback Application on page 29 n Data Collector on page 29 n Uninstall vCenter Chargeback on page 37 Hardware Requirements The system o...

Page 12: ...Server 2005 Standard and Enterprise n Microsoft SQL Server 2008 Standard and Enterprise n Microsoft SQL Server 2005 Express n Oracle Database 10g Standard and Enterprise n Oracle Database 11g Standar...

Page 13: ...going to install vCenter Chargeback Preferably obtain and set static IP addresses on all the servers and databases that the application communicates with Database Related Prerequisites Before you begi...

Page 14: ...rt exceptions are configured on the Windows firewall If the Windows Firewall is enabled you must set the port exceptions for the HTTP load balancer and HTTPS ports on the Windows Firewall If these exc...

Page 15: ...u are using a database instance name and dynamic database instance port to connect to the vCenter Chargeback database MSI Installation Is MSI installation enabled If not install Microsoft Visual C 200...

Page 16: ...ecified the installer uses the default port For an Oracle database you must specify the TNS listener port if you are not using the default port 1521 For an SQL Server database specify the database ins...

Page 17: ...nstall vCenter Chargeback Data Collector option is selected by default You must have at least one instance of this data collector running and registered with the application for the database synchroni...

Page 18: ...talls the data collector which synchronizes the vCenter Chargeback database with the vCenter Server databases NOTE If the installation fails due to some reason the uninstaller is automatically invoked...

Page 19: ...nter Chargeback database Cluster Installation When you install the vCenter Chargeback application for the first time on a machine a load balancer is also installed The existence of the load balancer e...

Page 20: ...ase service is listening for requests If the port number is not specified the installer uses the default port For an Oracle database you must specify the TNS listener port if you are not using the def...

Page 21: ...Cloud Director Data Collector too or ensure that at least one instance of VMware Cloud Director Data Collector is running 10 Optional If you chose to install the VMware Cloud Director Data Collector e...

Page 22: ...e Installation_Folder is the complete folder path provided during the vCenter Chargeback installation The default installation folder is C Program Files VMware VMware vCenter Chargeback 3 Run the Modi...

Page 23: ...racle Database ensure that you provide the service name and not the SID SQL Authentication Mode This option is applicable only for SQL Server databases For an SQL Server database the authentication ty...

Page 24: ...rector Data Collector too or ensure that at least one instance of VMware Cloud Director Data Collector is running 10 Optional If you chose to install the VMware Cloud Director Data Collector enter the...

Page 25: ...geback The pre upgrade tasks ensure that you have a backup of the database and necessary configuration files Also the completion of the pre upgrade tasks ensures that vCenter Chargeback can function s...

Page 26: ...staller might fail Procedure 1 Run the vCenter CB exe file The installation wizard is displayed 2 Click Next on the Introduction screen 3 Accept the end user license agreement and click Next When the...

Page 27: ...RL for accessing the vCenter Chargeback application is displayed 10 Note the URL and click Done The vCenter Chargeback instance is upgraded What to do next You can now connect to the upgraded vCenter...

Page 28: ...argeback 1 0 then the fixed cost name is prefixed with CT_id_of_cost_template_fixed_cost If you upgraded from vCenter Chargeback 1 0 1 then the fixed cost name is prefixed with G_id_of_cost_template_f...

Page 29: ...tart or stop a service from the selected service menu Accessing the vCenter Chargeback Application If all the required services are running you can access vCenter Chargeback through a supported Web br...

Page 30: ...App network level as well as the org network level n Download Data Collector on page 30 The installer for the data collector is bundled with the application and can be downloaded from the vCenter Char...

Page 31: ...tion for the vCenter Server instances added to VMware Cloud Director and vCenter Chargeback is synchronised and available in the vCenter Chargeback database even if a data collector instance fails Pre...

Page 32: ...erver database the authentication type can be either SQL Server Authentication or Windows Authentication Database Username The name of the database user The database user must have privileges to creat...

Page 33: ...You cannot provide only the drive name 5 Provide the details of the vCenter Chargeback database that the data collector must synchronize with the VMware Cloud Director database and click Next Option...

Page 34: ...database service is listening for requests If the port number is not specified the installer uses the default port You must specify the TNS listener port if you are not using the default port 1521 Dat...

Page 35: ...t provide only the drive name 5 Provide the details of the vCenter Chargeback database that the data collector must synchronize with the VMware Cloud Director database and click Next Option Descriptio...

Page 36: ...eview the information displayed on the Pre Installation Summary screen and click Install The installer starts installing the data collector If the installation is successful the URL for accessing vCen...

Page 37: ...hat is the vCenter Chargeback instance that includes the load balancer must not be uninstalled before other instances from the cluster are uninstalled Procedure 1 Start the uninstaller from the Start...

Page 38: ...section For the example suggested in the previous step the entry might be as follows Define the LB worker worker balancer type lb worker balancer sticky_session 1 worker balancer method R worker balan...

Page 39: ...e 42 n Managing vCenter Servers on page 44 n Managing Data Collectors on page 48 n Managing the Application License on page 54 n Manage Report View on page 55 n Managing Attributes on page 57 n Manage...

Page 40: ...rovided above Maximum Attachment Size KB The maximum permissible file size for email attachments The size specified is in KB 4 Click Add The email address provided is displayed in the Email Setting se...

Page 41: ...ts You must have the Super User role to perform this task NOTE In the case of a cluster installation the changing of log level in one application instance will not be reflected in the other instances...

Page 42: ...n the application Option Description Server Name A user defined name to uniquely identify the LDAP server You can provide a full name or a short code to identify the LDAP server Server Address Static...

Page 43: ...ou have configured an LDAP server in the application you can modify its details any time provided you have the required privileges For instance if the LDAP user account password is changed on the LDAP...

Page 44: ...default password is changeit After entering the correct password the certificate is be displayed and you are prompted to confirm whether you trust the certificate Type yes and press Enter to add the c...

Page 45: ...Servers A table listing information about the vCenter Server instances added to the application is displayed 2 Click Add The vCenter Server Information screen is displayed 3 Enter information about th...

Page 46: ...geback considers the existing vCenter Server inventory to have existed for the three month period prior to adding the vCenter Server 4 Click Add The vCenter Server is added to the application and incl...

Page 47: ...e to access the vCenter Server Database Database Password Password for the database user name entered Register As VI Client Plugin Select this option if you would like to register vCenter Chargeback a...

Page 48: ...and displays information about each data collector registered with the application The data collectors registered with the application and their corresponding details can be viewed from the Settings t...

Page 49: ...ctors page Table 3 1 Information About Data Collectors Registered in the Application Information Type Description Data Collector ID The ID of the data collector defined in vCenter Chargeback Data Coll...

Page 50: ...This synchronization job ensures that all information about the network view of the vCenter Server are synchronized in the vCenter Chargeback database n Stats Synchronization If the Enable Stats Repli...

Page 51: ...ou do not want to use a data collector you can disable it from the application IMPORTANT If only a single data collector is running do not disable it If disabled the synchronization jobs will not run...

Page 52: ...ter Chargeback considers the default database port VMware Cloud Director database username VMware Cloud Director database user name VMware Cloud Director database password Password for the VMware Clou...

Page 53: ...vShield Manager common properties section and click Edit You can modify the job interval for the broadband statistics collector job run by the vShield Manager Data Collector vShield Manager Data Colle...

Page 54: ...Description License Key The current license key used to access the application License Type The type of license used to access the application Activated On The date and time when the application was a...

Page 55: ...generated reports You can configure the report view to display a specific set of information in each of the generated reports Like most reports the chargeback report has multiple sections such as Hea...

Page 56: ...logo Ensure that the image size does not exceed 1MB Report Name The name of the report entered when generating the report Report Description A description of the report provided when generating the re...

Page 57: ...ttings tab click Manage Attributes 2 Click Create The Create Attribute screen is displayed 3 Enter the name and description for the attribute A attribute can be attached to an entity to provide additi...

Page 58: ...time limit The default range is 30001 120000 If the response time is in the Warning latency range the server is responding slowly and might need some attention The slow response could also be attribu...

Page 59: ...hargeback Resource Type Description VMware vCenter Server This resource type refers to the vCenter Server instances added to vCenter Chargeback A user must have read permission on a vCenter Server to...

Page 60: ...schedules created in vCenter Chargeback A user must have read permission on a schedule to access the reporting schedule Role This resource type refers to the roles defined or created in vCenter Charg...

Page 61: ...ed to the application users The predefined roles are Super User Administrator Hierarchy Manager Report Generator vCenter Guest User and No Access These roles have a set of permissions on the various r...

Page 62: ...s Yes Yes Yes No Billing Policy Yes Yes Yes Yes No Administrator Role Table 4 4 lists the permissions defined in the Administrator role for each of the resource type Table 4 4 Permissions Defined on t...

Page 63: ...es No Chargeback Hierarchical Entity Yes Yes Yes Yes Yes Attribute No Yes No No No Tier No No No No No Cost Model Yes Yes Yes Yes No Cost Template Yes Yes Yes Yes No Fixed Cost Yes Yes Yes Yes No Repo...

Page 64: ...e Table 4 7 Permissions Defined on the vCenter Guest User Role Resource Type Create Read Update Delete Entity Cost Modify VMware vCenter Server No Yes No No No Data Collector No No No No No LDAP Serve...

Page 65: ...The character limit is 512 characters 4 Select the required permissions for the available resource types 5 Click Create The newly created role is added to the table displaying the roles defined in th...

Page 66: ...e has created An administrator cannot access the users created by a super user or by another administrator Also an administrator can access only the following resources n Resources on which he is give...

Page 67: ...cal user is a user whose account details are defined in the vCenter Chargeback application You can create more than one local user in the application You must have the Super User role or the Administr...

Page 68: ...ting the Active Directory users defined in the selected LDAP server The number of users listed in this table is limited by the LDAP Limit set in the LDAP Server configuration 5 Select the required use...

Page 69: ...roups section You can select more than one group by pressing the Ctrl button and clicking the required group names You can also search for a group by specifying the group name or a search string in th...

Page 70: ...lication is displayed 2 Select the user that you want to delete and click Delete n If the selected user has the Administrator or Super User role and has created other users in the application the Dele...

Page 71: ...nter Chargeback other than the Super User role only defines the actions that the user can perform in the application This does not implicitly give access to the resources created in the application To...

Page 72: ...the user You can select more than one resource by pressing the Ctrl key and selecting each of the required resources However the roles that you can assign on these resources would depend on the inters...

Page 73: ...er Chargeback does not automatically remove the roles explicitly assigned to the user for the various resources The user can continue to access the resources that he has created and the resources for...

Page 74: ...he vCenter Server resource After registering the application as a plug in when you log in to the vCenter Server through the VI Client the application might display a security warning message for insta...

Page 75: ...entities This chapter includes the following topics n Creating a Chargeback Hierarchy on page 75 n Managing a Chargeback Hierarchy on page 78 Creating a Chargeback Hierarchy To identify the resource u...

Page 76: ...255 characters and the description must not exceed 512 characters in length 3 Select Synchronize with vCenter Server 4 Select the required vCenter Server and the vCenter Server hierarchy view to be us...

Page 77: ...description vcIP DNS vcEntityMoId vCenterViewId Table 5 1 describes each of the parameters in the CVS file entry Table 5 1 Parameters in the CSV File Entry Parameters Description UniqueId A unique num...

Page 78: ...displayed The right pane provides name description and various other details about the selected hierarchy You can modify the description by providing the new description and clicking Update 3 Expand...

Page 79: ...haracters The entity names are not case sensitive The entity with the provided name is added to the chargeback hierarchy What to do next You can undo an add operation by right clicking the newly added...

Page 80: ...s in the chargeback hierarchy The entities in the selected vCenter Server hierarchy will be highlighted only if the view type for the hierarchy of the selected vCenter Server and the vCenter Chargebac...

Page 81: ...emove any of its child entities without deleting the directly added vCenter Server entity from the chargeback hierarchy Even if an entity is deleted from the hierarchy the generated reports include th...

Page 82: ...n the Manage Hierarchy tab select the required chargeback hierarchy from the drop down menu on the left pane of the page The collapsed view of the chargeback hierarchy is displayed 2 Expand the hierar...

Page 83: ...ty and selecting the Revert this paste operation option However this option is not available on the entity if any further changes are made to the entity or to the chargeback hierarchy Allocate Computi...

Page 84: ...in the information dialog box 9 Close the Define allocation units for the selected entity screen to return to the Manage Hierarchy tab The defined allocation units for the specified time period is se...

Page 85: ...Server instances added before the upgrade then do not backdate the hierarchy You cannot backdate hierarchies imported from a VMware Cloud Director setup in to vCenter Chargeback vCenter Chargeback id...

Page 86: ...ame The first level entities in the hierarchy are displayed You can view all the entities in the hierarchy by clicking the plus sign to the left of the entities that have sub entities 3 Right click th...

Page 87: ...back Cost Related Elements on page 87 n Managing Cost Models on page 92 n Managing Fixed Costs on page 96 n Managing Cost Templates on page 99 n Managing Billing Policies on page 101 n Configuring Cos...

Page 88: ...Whether the NAT service for VMware Cloud Director network is enabled or not DHCP Service Whether the DHCP service for VMware Cloud Director network is enabled or not Firewall Service Whether the fire...

Page 89: ...0006 vCPU 0 04 1 0 04 Fixed Cost A fixed cost is a definite cost that can be charged on an entity Fixed costs can be recurring costs or non recurring or one time costs Recurring costs that are charged...

Page 90: ...ing the total cost Memory Reservation This policy takes into account the memory capacity reserved for a virtual machine This reserved memory capacity along with the actual utilization of other chargea...

Page 91: ...utilization of other chargeable computing resources for calculating the total cost VMware Cloud Director Billing Policy Allocation Pool This billing policy is available only if the VMware Cloud Direct...

Page 92: ...Template A cost template consists of entity specific cost configuration details These are rate factors for the chargeable computing resources and the fixed costs You can set these values in a cost tem...

Page 93: ...l name is 255 characters Description An optional description of the cost model The character limit for the description is 512 characters Currency The currency type used for defining the base rates and...

Page 94: ...the fixed cost for various guest operating systems and the duration for charging the same If a virtual machine has the specified operating system installed on it then the set rate would be charged 12...

Page 95: ...task Modify a Cost Model After a cost model is created you can modify it as and when required You must have update privilege on the cost model to perform this task Procedure 1 In the Manage Cost tab...

Page 96: ...mandatory information and do not have any default values Delete a Cost Model You can remove invalid or unwanted cost models from the application However you cannot delete the Default Chargeback Cost...

Page 97: ...type used for defining the fixed cost 4 Optional If the defined cost has to be charged only once on the chargeback entity or hierarchy then select the One Time option If you select this option then y...

Page 98: ...fective You must enter the dates in the mm dd yyyy format If the end date is not specified the cost detail will be effective from the specified start date till infinity 5 Optional To fetch the cost va...

Page 99: ...page 100 Invalid or unwanted cost templates can be removed from the application However deleting a cost template does not remove the entity specific cost settings applied on the entities using the co...

Page 100: ...clicking the plus sign in the Details column of the table Modify a Cost Template After a cost template is created you can modify it as and when required You must have the update privilege on the cost...

Page 101: ...g policy defines an expression for each resource The expression includes an attribute value that identifies the computing resource units to be considered for cost calculation The attribute values can...

Page 102: ...A Sample Billing Policy Expression Let us try to define a billing policy that accounts for the maximum of reservation and usage for CPU and memory only for virtual machines that are powered on maximu...

Page 103: ...applied uniformly to the entities and hierarchies for which you generate a report In a real world scenario however you might want to charge each entity or a set of entities differently That is the res...

Page 104: ...icating that the cost configuration details will be effective from the time of setting these details on the entity till they are modified at a future date If you want to set the cost configuration det...

Page 105: ...lling was earlier disabled on the entity for the specified time period Disable Select this option if you want to disable billing on the entity for the specified time period 12 Click Update Billing Whe...

Page 106: ...ctors If you select a cluster the right pane of the page displays the cluster properties and the ESX hosts under the selected cluster along with the fields to set the rate factors for individual compu...

Page 107: ...enerate cost reports usage reports and cost comparison reports for a chargeback hierarchy and for entities in the hierarchy An exported chargeback report includes various sections Report summary This...

Page 108: ...d for each resource are the rolled up costs at that entity level This section also displays the actual resource utilization details at each entity level Starting with vCenter Chargeback 1 5 this secti...

Page 109: ...rate Cost Report from the pop up menu a To generate a report for multiple entities press the Ctrl key select each of the required entities and right click Do not release the Ctrl key till you right cl...

Page 110: ...se usage and cost details have to included in the report 7 Select Include cost summary in report to include the summary of costs in the report The cost summary cab be either Complete default or Basic...

Page 111: ...rating the report by providing the start date and end date for the reporting duration This reporting duration is the time period for which the usage statistics of computing resources will be retrieved...

Page 112: ...d view of the chargeback hierarchy is displayed You can expand the hierarchy by clicking the plus sign to the left of the hierarchy name The first level entities of the hierarchy is displayed To furth...

Page 113: ...hese details in report Select this option if you want to include information about the selected cost model or the entity attributes or information messages in the Cost Details section of the report Th...

Page 114: ...urday and the report generation day as Thursday the report generated every Thursday is for the period Sunday through Saturday of the earlier week n Monthly In this case the reporting period is one mon...

Page 115: ...eneration from the Create Report screen Other than the create privilege for report and schedule resource types you must have read privilege on the hierarchy chargeback hierarchical entities and cost m...

Page 116: ...to be generated periodically 5 Click Schedule The revised report generation schedule is listed in the table Remove a Schedule An existing and valid report generation schedule can be deleted from the a...

Page 117: ...earch for Scheduled Reports You can search for specific scheduled reports by using the advanced search feature of vCenter Chargeback You can only search for scheduled reports on which you have read pe...

Page 118: ...se the types of the graphs to be included in the report n Archive Report on page 119 A generated report can be archived and stored in the application After you generate a report the application displa...

Page 119: ...columns in the displayed report select the column head and drag the mouse cursor to the left or right as required Release the mouse button to move the column to the new location What to do next To sa...

Page 120: ...SMTP server has been configured before emailing the report Procedure 1 Click the Email Report icon above the generated report The Email Report screen is displayed 2 Provide the email details Option D...

Page 121: ...d application or save the file on the system Managing Archived Reports The Archived Reports page of the Reports tab displays a table listing all the reports archived in the application This includes m...

Page 122: ...s deleted the export to rtf might fail If you have chosen to export the report to the pdf format an Opening filename pdf dialog is displayed If you have chosen to export the report to the csv format a...

Page 123: ...vanced search feature of vCenter Chargeback You can only search for archived reports on which you have read permission Procedure 1 Click Advanced on the Archived Reports page of the Reports tab The Ad...

Page 124: ...o sections Details of selected entity and Recent reports The Details of selected entity section provides the following information n Name of the selected entity n Total cost of the entity n The Cost p...

Page 125: ...isites To perform this task you must have read privilege on the hierarchy and on the corresponding cost model used to configure the report dashboard Procedure 1 In the Reports tab click Dashboard 2 Se...

Page 126: ...vCenter Chargeback User s Guide 126 VMware Inc...

Page 127: ...em Health Tab Section Information vCenter Chargeback Servers URL of all the vCenter Chargeback instances included in the cluster is listed If the installation is a stand alone instance only one URL is...

Page 128: ...l other tabs if there is no action the user session times out after 30 minutes vCenter Chargeback Events Most user actions generate an event in the application These events are recorded in the Events...

Page 129: ...ripts on page 130 Database Password Change Utility vCenter Chargeback also provides a utility to change the password of the vCenter Chargeback database user This utility changes the password in the hi...

Page 130: ...rgeback Database Management Scripts vCenter Chargeback provides SQL scripts that can help database administrators to manage the vCenter Chargeback database These SQL scripts can be run from the SQL pr...

Page 131: ...by purging the cost data that is older than the specified number of months spaceHierarchyData This script returns the amount of space that can be retrieved by purging the hierarchy data that is older...

Page 132: ...tely before running the script purgeStatsData This script removes the vCenter Server performance statistics data that is older than the specified number of months from the CB_VC_PERFORMANCE_STAT table...

Page 133: ...lication log and System log n Configuration files for data collectors installation load balancer vCenter Chargeback server Tomcat Server and the vCenter Chargeback application n Log files for data col...

Page 134: ...Sessions Multiple users can access the application simultaneously Changes made by a user are visible in concurrent user sessions Problem Creation deletion and renaming of a chargeback hierarchy by a...

Page 135: ...r from the local machine The installer fails if run from a remote location An alternative is to map the shared location of the installer to a network drive and then run the installer LDAP Server Confi...

Page 136: ...nerated Problem Although the disk read and disk write computing resources are selected when generating a report the disk read and disk write information and the corresponding costs are not displayed i...

Page 137: ...4 and vCenter Server shipped with vSphere 4 0 the statistics collection level must be set to 3 or above for the average network transmitted and received counters to be available Service Temporarily U...

Page 138: ...s service is started and running Ensure that this service is running for all the vCenter Server instances that are added to the application Text and Messages on the vCenter Chargeback User Interface A...

Page 139: ...geback Problem When configuring the LDAP server in vCenter Chargeback an error is thrown and the operation fails The error is similar to the following message An error occurred Entity not found in LDA...

Page 140: ...bin folder keytool storepasswd keystore Installation_Path jre lib security cacerts Here Installation_Path jre lib security cacerts is the default keystore path 2 Specify the current password for the...

Page 141: ...perty_name cbEventListRawView lastProcessTime delete from cb_server_property where server_property_name like vcLastProcessTime 5 Restart the VMware Cloud Director Data Collector instances Unable to Co...

Page 142: ...number of server process to run a In the Oracle Database run the following command from the SQL prompt ALTER SYSTEM SET PROCESSES NNN SCOPE SPFILE Here NNN is the maximum limit for server processes T...

Page 143: ...e email report operation fails Problem vCenter Chargeback fails to send the report through email The following error might be displayed Check if the email settings are properly configured If not confi...

Page 144: ...e the default security related file names with the custom SSL file names 3 Restart the vCenter Chargeback service Solution Starting with vCenter Chargeback you can generate your own SSL certificate af...

Page 145: ...a Web browser 3 Check whether the VI Client machine and the vCenter Chargeback machine are on the same network domain 4 Check whether the vCenter Chargeback SSL certificate is installed on the VI Cli...

Page 146: ...vCenter Chargeback User s Guide 146 VMware Inc...

Page 147: ...ocating computing resource units for a entity 83 assign attributes 82 backdate 85 create custom hierarchy 75 creating 75 CSV file format 77 delete entity from 81 delete hierarchy 82 import from CSV fi...

Page 148: ...ware requirements 11 installer files 15 software requirements 12 stand alone instance 15 upgrading existing instance 26 using existing database schema 22 interactive report view modify report 118 L LD...

Page 149: ...ge keystore password for secure LDAP 140 custom SSL certificate 144 data collector status 137 database connection failure 141 142 email report failure 143 fetch primary LDAP group 143 GUI display issu...

Page 150: ...39 cost elements 87 events 128 generate SSL certificate for 18 hardware requirements 11 installing 11 managing users roles and permissions 59 monitor system health 127 permissions defined in 60 relate...