Dell Unisphere for PowerMax 10.0.1 Product Guide

Roles

A Unisphere user can assume several roles. Tasks and associated permissions are associated with each role.

The following lists the available roles.

You can assign up to four of these roles per authorization rule.

For a more detailed look at the permissions that go along with each role, see Roles and associated permissions.

• None—Provides no permissions.
• Monitor—Performs read-only (passive) operations on a storage system excluding the ability to read the audit log or access control definitions.
• StorageAdmin—Performs all management (active or control) operations on a storage system and modifies GNS group definitions in addition to all Monitor operations.
• Administrator—Performs all operations on a storage system, including security operations, in addition to all StorageAdmin and Monitor operations.
• SecurityAdmin—Performs security operations on a storage system, in addition to all Monitor operations.
• Auditor—Grants the ability to view, but not modify, security settings for a storage system(including reading the audit log, symacl list, and symauth) in addition to all Monitor operations. This role is the minimum role that is required to view the storage system audit log.
• Local Replication—Performs local replication operations (SnapVX or legacy Snapshot, Clone, BCV). To create Secure SnapVX snapshots a user must have Storage Admin rights at the storage system level. This role also automatically includes Monitor rights.
• Remote Replication—Performs remote replication (SRDF) operations involving devices and pairs. Users can create, operate on, or delete SRDF device pairs but cannot create, modify, or delete SRDF groups. This role also automatically includes Monitor rights.
• Device Management—Grants user rights to perform control and configuration operations on devices. Storage Admin rights are required to create, expand, or delete devices. This role also automatically includes Monitor rights.

In addition to these user roles, Unisphere includes an administrative role, the Initial Setup User. This user, that is defined during installation, is a temporary role that provides administrator-like permissions for the purpose of adding local users and roles to Unisphere.