Hardware manual

Group Administration Group security
4–2
Administration access options
Table 4-3 shows the access options and network services.
Table 4-3: Administration Access Options
Field Description Shortcut User Actions
Enable Web access Whether administrators can access the Group
Manager through the web interface.
Note: To run Auto-Snapshot Manager/
VMware Edition, you must enable use
of the GUI for group administration.
Alt+W See Enabling or disabling GUI or
CLI access on page 4-2
Allow only secure SSL
connections
Whether administrators must use an SSL
connection when connecting to the GUI.
A
lt+A See Enabling or disabling GUI or
CLI access on page 4-2
Enable telnet access Whether the CLI can be accessed through a
te
lnet connection.
Alt+T See En
abling or disabling GUI or
CLI access on page 4-2
Enable SSH (secure
shell) access
Whether the CLI can be accessed through an
SSH connection.
Alt+S See Enabling or disabling GUI or
CLI access on page 4-2
The CLI provides additional options for managing network services. Using the CLI, you can also enable or disable
SSH V1 protocol support or the ftp service. See the CLI Reference manual.
Enabling or disabling GUI or CLI access
1. Click Group, then Group Configuration, and then the Administration tab.
2. In the Administration Access panel, enable or disable the GUI or CLI access
options and network services as
described in Administration access options on page 4-
2.
3. Click
Save all changes (Control+S).
About administration accounts
Having persons in the role of administrator is important to protect and maintain your group from unauthorized
access. Environments that need additional security might also benefit from a dedicated management network.
To manage or monitor a group, you must log in to an administ
ration account. Administration accounts prevent
unauthorized individuals from accessing a group.
An account can authorize an indi
vidual to perform all group operations, perform only operations on a pool (and
optionally monitor the entire group), manage its own volumes within an assigned quota, or only monitor the group,
depending on the type of account.
The default administration account,
grpadmin, can perform all group operations. Dell recommends that you set up
an account for each administrator.
Recommendation: Dell recommends one a
ccount per user and that the group administrator monitors the activity
of other accounts. See Chapter 15, Group mo
nitoring, for more information.