Summary

This procedure explains how to use PowerStore X without requiring vCenter admin privileges.
After the procedure is completed, the PowerStore X will be fully operational. All PowerStore X features, except for those listed below, are supported, including NDU, without needing admin privileges.
 

• Management Network Reconfigure (MNR),
• Storage Network Reconfiguration (SNR), 
• vCenter Migration 

Overview

Two new Roles are created in the vCenter to enable the creation of a PowerStore X without requiring vSphere admin privileges:

• PSTX-Admin 
  • A copy of the Administrator role, to be applied for a specific user at the DataCenter level of the PowerStore X installation.
  • The "Privileges” of this Role include all the available roles in the vCenter.
  • The role name "PSTX-Admin" is an example. Use any appropriate role name.
• Storage Views
  • This is a new role set at the vCenter level and applied to a specific user,
  • The "Privileges” of this Role include access to the configure service and to view the Storage Providers (VASA), 
  • The role name "Storage Views" is an example. Use any appropriate role name.

Procedure

1. Create a new user.  Open the vCenter and navigate to Menu > Administration > Single Sign On > Users and Groups
2. Select the desired domain. Note: vsphere.local is the default domain of the SSO.  Should the customer have a different domain name, or using AD/LDAP, this name should be used instead.
3. Click Add.
4. Enter the necessary information for the creation of this new user:                                                                          

5. Navigate to Menu > Administration > Access Control > Roles
6. Find the Administrator role, select it, and click "Clone”.
7. Rename the Role, and a Description, if desired.
8. In the case of this role, it is important that all possible privileges be selected.
9. Create a new Role on the same page in the vCenter.
10. This role should have only the Storage views permissions available and selected: 

11. Navigate to the Menu > Inventory page,
12. Select the vCenter level of the inventory tree.
13. Navigate to the Permissions tab.
14. Click the add button.
15. Leave the domain field alone so that desired domain is shown, as selected in step 2. The default domain is the vsphere.local domain.
16. In the User / Group field, type the name of the user created in step 4.
17. In the Role field, selected the role created in step 10.
18. In the Inventory tree, select the DataCenter of the PowerStore X installation.
19. Repeat steps 15 and 16.
20. In the Role field, select the role created in steps 6 and 7.
21. Next, open the PowerStore Manager.  Navigate to Compute > vCenter Server Connection
22. There, click the "Update Configuration” button.
23. Next, change the vCenter Administrator Username and enter the password.
24. Click the Update button.