HP StorageWorks P9000 Command View Advanced Edition Software Common Component Security Guide

Security function operations
39
7 Security function operations
This chapter describes the operations of Common Component's security functions as evaluated
based on Common Criteria. These operations are related to secure setup and operation of HP
StorageWorks P9000 Command View Advanced Edition Suite software, and must be performed in
accordance with the system operation policy of the organization.
• Explorer menu items related to user management (see section 7-1 )
• Explorer menu items related to setting up security (see section 7-2 )
• Security-related operations and notes (see section 7-3 )
• Supplement (see section 7-4 )
7-1 Explorer menu items related to user
management
User management operations can be performed by displaying the Explorer menu and then
choosing Users and Permissions. Users and Permissions is available on the Explorer menu
only if the logged-in user has the User Management Admin permission. A user without this
permission is unable to perform any user management operations because Users and
Permissions is not displayed on the Explorer menu.
7-1-1 Users and Permissions subwindow
The Users and Permissions subwindow can be used to add users and set user permissions. If you
use linkage with an external authentication server, you can manage user accounts centrally on the
external authentication server. If you use both an external authentication server and an external
authorization server, you can manage user accounts on the basis of authorization groups.
7-1-1-1 Users and Permissions items
Name
The following user management items are displayed. Choose the appropriate item
for the operation you want to perform.
• Users
Choose this item to set or check user information. Choosing this item opens
the Users subwindow.
• Permissions
Choose this item to check the number of users who have been granted
permissions and to check detailed information. Choosing this item opens the
Permissions subwindow.
• Groups
Choose this item to set the permissions for a Windows Active Directory group.
Choosing this item opens the Groups subwindow. This item is displayed only if
linkage with an external authorization server is enabled in the Common
Component properties file (exauth.properties).
7-1-2 Displaying the user list
The user information for all HP StorageWorks P9000 Command View Advanced Edition Suite
software installed on the management server can be displayed in list format. This list displays the
user ID, user name, and other information about each user.
To display the user list: