HP 3PAR InForm OS 3.1.1 CLI Administrator's Manual

3 Managing User Accounts and Connections
Learning About User Accounts
In order to access an HP 3PAR Storage System you must have a user account. Each InForm OS
CLI user is assigned a role, and each role is assigned a set of rights. The roles and rights assigned
to the CLI user determine which tasks the user can perform with a system. Assign roles to users
based on the tasks you intend the users to perform.
Eight roles are defined in the InForm OS CLI. See Table 4 (page 20) for a description of each role.
There are four standard roles:
• Browse
• Edit
• Super
• Service
There are also four extended roles:
• Create
• Basic Edit
• 3PAR AO
• 3PAR RM
There is no functional difference between standard and extended roles. The extended roles define
a set of rights optimized for CLI users with specialized or restricted tasks. For example, assigning
a CLI user the Create role allows the user to create virtual volumes and other objects but does not
allow the user to remove virtual volumes. To maintain greater control over your system, assign CLI
users roles with the minimum set of rights they need to perform their tasks.
• “Creating Users” (page 22) and “Removing Users” (page 24).
• For information about viewing user roles and rights with the CLI see “Viewing User Roles and
Rights” (page 47).
• To view a list of roles and all of the rights assigned to the roles, see “Mapping Roles and
Rights” (page 151).
Table 4 InForm OS CLI User Roles
Rights Assigned to RolesUser Roles
Rights are limited to read-only access.Browse
Rights are granted to most operations. For example, creating, editing, and removing virtual
volumes and other objects.
Edit
Rights are granted to all operations.Super
Rights are limited to operations required to service the system. Allows limited access to user
information and user group resources.
Service
Rights are limited to creating objects. For example, virtual volumes, CPGs, hosts, and
schedules.
Create
Rights are similar to the Edit role. For example, creating and editing virtual volumes and
other objects. The rights to remove objects are more restricted for the Basic Edit role than
the Edit role.
Basic Edit
Rights are limited to internal use by HP for Adaptive Optimization operations.3PAR AO
Rights are limited to internal use by HP for Recovery Manager operations.3PAR RM
20 Managing User Accounts and Connections