3PAR InForm® OS 2.3.1 Concepts Guide (320-200112 Rev B, February 2010)

5.2
Overview
3PAR InForm OS Concepts Guide InForm OS Version 2.3.1
In addition to the inherent security provided by this hierarchical user structure, finer grain
access control of the InServ system can optionally be achieved through the implementation of
3PAR Virtual Domains (domains).
Domains allows an administrator to create up to 1024 domains, or spaces, within an
InServ Storage Server, where each domain is dedicated to a specific application. A subset of the
InServ Storage Server users have varying privileges over the domains. The use of domains can
be useful in scenarios where a single InServ Storage Server is used to manage data from several
different independent applications (Figure 5-1).
Figure 5-1. Single Storage Server Managing Multiple Independent Applications
Each domain allows users with varying levels of accessibility to domain objects. A domain is
made of Common Provisioning Groups (CPGs), hosts, and Remote Copy groups. Domains
contain derived domain objects such as Virtual Volumes (VVs), Logical Disks (LDs), and volume
exports (VLUNs). Because objects are domain-specific, domain users cannot accidentally or
deliberately export VVs to hosts outside of their assigned domain.
NOTE: 3PAR Virtual Domains require a 3PAR Virtual Domains license. For
additional information about the license, see 3PAR InForm Software on page 2.7.
InServ
Application A
(data source A)
Application B
(data source B)
Application C
(data source C)
Storage
Server
Domain A
Domain B
Domain C