HP 3PAR InForm OS 3.1.1 Concepts Guide

Table 3 InForm OS User Roles (continued)
Rights Assigned to RolesUser Roles
Rights are limited to internal use by HP for Adaptive
Optimization operations.
3PAR AO
Rights are limited to internal use by HP for Recovery
Manager operations.
3PAR RM
Local User Authentication and Authorization
Users accessing the HP 3PAR Storage System with the InForm OS CLI client or Secure Shell (SSH)
connections are authenticated and authorized directly on the system. These users are referred to
as local users. The information used to authenticate and authorize a local user is stored on the
system.
For instructions on creating a local user, refer to the InForm OS CLI Administrator’s Manual and
the InForm OS Management Console Online Help.
LDAP User Authentication and Authorization
An LDAP user is authenticated and authorized using information from a Lightweight Directory
Access Protocol (LDAP) server. If multiple systems are configured to use the same LDAP server, a
user that can access one system can access all systems with the role and rights assigned to the
LDAP group.
Local user roles and rights are associated with an individual, LDAP user roles and rights are the
same for all members of the group. If you want to authenticate and authorize LDAP users with
different roles, you must create an LDAP group for each role.
For detailed information about LDAP users and LDAP connections, see “LDAP” (page 21). For
instructions on setting up an LDAP connection, refer to the InForm OS CLI Administrator’s Manual.
Domain User Access
A domain user is a user with access to a specific domain. Local users belonging to a system using
HP 3PAR Virtual Domains Software are domain users. In addition to the user’s roles and rights, a
domain users’ activities are also limited to the domain(s) to which they have access. A domain
user’s assigned user role is applicable only within the domain to which the user has access.
For detailed information about virtual domains and domain users, see “HP 3PAR Virtual Domains”
(page 25). For instructions on creating a domain user, refer to the InForm OS CLI Administrator’s
Manual and the InForm OS Management Console Online Help.
NOTE: Virtual domains require an HP 3PAR Virtual Domains Software license. For additional
information about the license, see “HP 3PAR InForm OS Software” (page 15).
20 HP 3PAR Storage System Users