3PAR InForm® OS 2.3.1 Concepts Guide (320-200112 Rev B, February 2010)

5.4
Users and Domain Privileges
3PAR InForm OS Concepts Guide InForm OS Version 2.3.1
5.3 Users and Domain Privileges
By default, users belonging to the Super user class have privileges over the entire system. Only
these users and users belonging to the Edit user class in the all domain can create and edit
CPGs, hosts, Remote Copy groups, and assign CPGs and hosts to
specified domains.
Additionally, these users have access to all domains and their objects.
When setting up domains and users in the InServ system, some users may require access to
multiple domains with different user privileges. 3PAR Virtual Domains allow users access to
more than one domain and a single user can be assigned different user classes in each domain.
Table 5-1. User Class Privileges by Domain Type
User Class Privileges in Domain “All” Privileges in Domain “Specified”
Browse ■ Browse all objects in the system.
■ Review the system event log.
■ Review system alerts.
■ Browse all physical system
objects.
■ Browse basic and derived domain
objects in the user’s specified
domain.
Edit ■ All Browse user class privileges.
■ Create hosts.
■ Modify hosts.
■ Create CPGs.
■ Create VVs.
■ Create VLUNs.
■ Create Remote Copy links and
settings.
■ All Browse user class privileges.
■ Create VVs using CPGs in the
user’s specified domain.
■ Modify, grow, update, and
remove VVs.
■ Create and promote snapshots.
■ Create physical copies of VVs.
■ Create and assign VVs to Remote
Copy domains.
■ Create and remove host sees and
matched set VLUNs.
■ Modify hosts properties.
NOTE: A user having privileges over multiple domains cannot perform intra-
domain operations between objects in different domains. Users can have
privileges to a maximum of 32 domains.