Installation Instructions

Administrative Access Advanced Topics
Part Number: A3 Installation and Usage Guide Community 132
Paravirtualization
Under certain heavy I/O load from multiple VMs, paravirtualization can cause A3 VMs to
slow by a factor of 20%. Beneficially, however, paravirtualization improves stability and
performance reliability and linearity.
Snapshots
VM snapshots affect the performance of running VMs. Copy-on-write snapshots have a
further detrimental affect, since two disk accesses are performed for each application
write operation. It is desirable, therefore, to disable snapshotting of A3 VMs.
If snapshots are used, only VM disks should be snapshot and not the RAM. Memory
snapshots will introduce extended latency in A3 operation.
Administrative Access
Although a single administrator is defined at A3 installation, lesser administrative access
can be given to other A3 administrators. The admin access roles are used in
Authentication Sources under Administrative Rules. See the example below; a larger scale
example is included in Use Case 3: Local User Authentication.
1. Navigate to Configuration > System Configuration > Admin Access.
2. The built-in roles are listed below. These can be used as-is:
• ALL: provides the user with all the admin roles without any exception
• ALL_PF_ONLY: provides the user with all the admin roles related to the A3
deployment (excludes switch login rights)
• Node Manager: provides the user the ability to manage the nodes
• User Manager: provides the user the ability to manage other users
• Security Event Manager: provides the user the ability to manage the security
events (trigger, open, close) for the nodes
3. Otherwise a new role can be defined, select .
4. Fill in the form as per the following table:
Creating Dynamic Reports
Using the /usr/local/pf/conf/report.conf configuration file, you can define reports that
create SQL queries to view tables in the A3 database. These reports will appear under the
Reports > Dynamic Reports menu of the A3 GUI.
Field Usage Example
Name Name for the type of administrator, not the
name of the administrator.
User admin
Description A further description Can administer user
entries
Actions Which actions this type of admin can perform. Select all the actions
under Users.