Product data

Chapter 5. System management 93
3. Discover the domain server (another SDMC that is connected to managed
systems) from the System Discovery page. The domain server is discovered
as the Operating System type.
4. Request access to the discovered domain server by right-clicking the server
and selecting Security  Request Management Access.
5. Enter the credentials for the domain server and click Request Access.
The remote managed systems of the domain server are now listed on the
Navigate Resources page.
5.4.2 Using hierarchical management
After the hierarchical management is set up, you can view and run tasks on the
the remote managed resources from the global server. To view and run tasks on
a remote managed system, right-click the remote managed system in the
Navigate Resources page and select a task to run. The global server opens a
new browser page and starts the selected task on the domain server. A new
browser page opens for each task that you run.
5.4.3 Hierarchical management security
Access to systems managed by the domain servers is controlled by a one-to-one
(1:1) user mapping between the global server and the domain server. A 1:1
mapping is a mapping that is created for each user on the global server to a user
on the domain server. Each user who accesses the global server will only be
able to manage the remote managed systems that the user is authorized to
manage on each domain server. Users on the global server do not have
complete access to all remote managed systems across all domain servers.
When a user unlocks a domain server by entering the correct credentials, a 1:1
mapping is automatically created for that particular user. This mapping is used
for further interactions of that user with the domain server. The user can change
the mapped credentials (user ID and password) for the targeted domain server at
any time through the Configure Single Sign On UI. Other users who log on the
global server to manage remote managed systems from a domain server should
use the Configure Single Sign On UI to create their own 1:1 mappings to access
that domain server.
Note: If you see Request Access instead of Request Management Access,
the domain server has not been discovered using the Representational
State Transfer (REST) protocol. You need to rediscover the domain server.