HP Serviceguard Manager Plug-in Security Whitepaper, March 2009

HPSMH User
HPSMH Role
Serviceguard Role
R
oot
(e.g. root)
Admin
Serviceguard Root
non
-
root
(e.g.
jane)
Admin
Serviceguard Root
non
-
root
Operator
Based On Serviceguard Access
-
control policy for the
user. Can be one of
Full Admin
,
Package Admin
, o
r
Monitor
non
-
root
User
None
-
the user will not be allowed to access
Serviceguard Manager.
Table 1
.
SMH Roles T
o Serviceguard Roles Mapping
Serviceguard has two levels of access,
Root Access
and
N
on
-
root
Access
:
Root Access
:
Users who have been au
thorized for
root access
have
full access
control over the
configuration of the cluster
, nodes
and packages.
Non
-
root Access
:
Users who have been authorized for
n
on
-
root
access
can be assigned one of
four
roles
:
Monitor
,
(single
-
package)
Package Admin
,
(a
ll
-
packages)
Package Admin
,
or
Full Admin
.
Refer to Table
2
, Non
-
root Access Roles, for more information
on what operations are allowed for the
corresponding role by Serviceguard Manager
.
Note that users with
non
-
root access
can never
configure a cluster
regardless of their assigned roles.
Serviceguard
Role
Description
Monitor
This user can access the following:
From the
View
pull
-
down menu:

Summary

Node Properties

Package Properties

Build Version
From the
Alerts & Logs
pull
-
down menu:

Display All Ale
rts

Display Package Alerts
Package
Admin
This user can access all
Monitor
menu items, as well as the following menu
items:
From the
Administration
pull
-
down menu:

Run Package

Run Package on Node

Halt Package

Halt Package on Node

Move Package

Enable/Disab
le Package Auto Run