HP Storage Provisioning Manager (SPM) User Guide (5992-5070, March 2010)

group of the server running the SPM service. That is, only members of the local Administrators group
are able to log into SPM until more subjects are granted catalog access. See Catalog access rights.
Table 1 Catalog access rights
DescriptionAccess right
Grants a user or group general permission to make inquires about the entities
in the catalog. This access right is required to log into the SPM interface.
CatalogView
Grants a user or group general permission to make requests that add, remove,
or change entities in the catalog.
CatalogModify
Grants a user or group permission to modify the catalog access control list,
including the owner. Grant this right only to users or groups that are considered
administrators, since anyone that can change the catalog owner can give
themselves unlimited access to SPM service.
CatalogModifySecurity
Grants a user or group permission to make requests that perform diagnostics
on the service. Grant this right only to administrators, and to HP support staff
when necessary.
CatalogRunDiagnostics
At the entity level, every request involves reading or somehow modifying certain entities. If the request
access check at the catalog level is successful, access checks against any involved entities are then
performed. Not all of the entity access rights pertain to all entity types. See Entity access rights.
Table 2 Entity access rights
DescriptionAccess right
Grants a user or group permission to view (read) properties of the associated
entity.
EntityView
Grants a user or group permission to change the properties of the associated
entity.
EntityModify
Grants a user or group permission to modify the access control list of the asso-
ciated entity, including the owner.
EntityModifySecurity
Grants a user or group permission to request the associated resource entity
(volume or array) to refresh the properties from management service of the re-
source.
ResourceRefresh
Grants a user or group permission to fulfill (bind) the associated service entity
(volume) with any volume goal.
ServiceBind
Grants a user or group permission to have SPM automate the changes to the
presentation of the associated volume when a referencing goal is updated.
VolumeModifyPresenta-
tion
Grants a user or group permission to add volume entities to the associated
storage array.
ArrayImportVolumes
The entity ACL owner is given EntityView and EntityModifySecurity access rights for that entity. The
default entity ACL owner is the requester that created the entity.
NOTE:
A volume also inherits access rights from the storage array and from the service group, if it is associated
with one.
HP Storage Provisioning Manager (SPM) User Guide 19