3.6.1 HP PolyServe Matrix Server Administration Guide (T5392-96018, August 2008)

Chapter 12: Configure Security Features 145
– Custom. Manipulate virtual hosts, service monitors, and device
monitors. Create affects the ability to create new application
objects. Modify affects the ability to change existing application
objects, including adding new servers to an object and rehosting
objects. Delete affects the ability to delete application objects.
– File Serving. Manipulate MxFS for CIFS application objects,
including Virtual File Services and Matrix File Shares. This
resource is available when is installed. Create affects the ability to
create new application objects. Modify affects the ability to change
application objects. Delete affects the ability to remove application
objects.
– SQL. Manipulate SQL application objects including Virtual SQL
Services, MSSQL, MSDTC, SQL instances, and SSAS instances.
This resource is available when HP PolyServe Software for
Microsoft SQL Server is installed. Create affects the ability to create
new objects and to use the Multi-Node Installer for SQL. Modify
affects the ability to update existing application objects including
the maintain operation, the rehost feature, the update feature of the
Multi-Node Installer for SQL, and the SQL Instance Aliasing
service. Delete affects the ability to delete SQL application objects.
Allow or Deny Rights
You can allow or deny rights as necessary for each role. A checkmark
indicates that the right is allowed. An X indicates that the right is denied.
Typically, the deny operation is used to exclude a user or group from a
particular right granted to a role to which the user or group belongs. For
example, a group might belong to a role that allows filesystem creation,
modification, and deletion; however, you do not want certain members of
the group to be able to delete filesystems. You would create a role just for
those users and deny the right to delete filesystems.
You can assign or deny rights for a role either manually or by using a
template.