HP Matrix Operating Environment 7.2 Installation and Configuration Guide for Provisioning with Virtual Resources

5 Configuring the CMS
Setting Matrix Operating Environment role authorization
Matrix infrastructure orchestration contains two levels of resource definition and user access, Service
Provider and Organization.
This section describes the process of customizing user and administrative authorizations at the
Service Provider level. For instructions on configuring resources and users at the Organization level
see the whitepaper Multi-Tenancy in HP Matrix Operating Environment Infrastructure Orchestration.
Role authorization overview
There are two main administrative roles defined in Matrix OE.
• Senior administrators: The user can modify user authorizations, apply licenses to systems, or
perform other actions that require CMS Security settings.
• Matrix infrastructure orchestration administrators: The user can manager Matrix OE resources
and service provider-level services. If VCEM is installed, the user has access to VCEM in a
read-only mode.
The steps described are based on configuring authorizations based on Windows user groups.
While authorizations can be configured based on individual users, it is much simpler to manage
authorizations when performed at a group level. In “Senior Administrators” (page 47), a Senior
Administrator group called Administrators is created in Matrix OE. By default, Matrix OE has only
a user, not a group, called Administrators. By default, Matrix OE has only an “Administrator” user
and no “Administrators” group. After the group is created, toolboxes that represent capabilities
are authorized for use by the Administrators group.
Senior Administrators
Creating a Senior Administrators Users Group
Perform the following steps to configure the Windows Administrators group to have authorizations
as Senior Administrator.
1. Login to HP SIM using the installation account or another account that has CMS Security
authorization.
2. Select Options→Security→Users and Authorizations....
3. Click the Users tab.
4. Click New Group….
5. Enter the Group name as Administrators (this can be any local or domain group).
6. Enter the Domain as either the Active Directory domain or the local computer name.
7. From the Copy all authorizations of this user or [template] selection, choose
[administrator-template].
8. Make sure the CMS security access checkbox is checked.
Setting Matrix Operating Environment role authorization 47