User guide

You can control the users mapped into a tenant by specifying attributes. For example,
if you only want users assigned to a specific department in AD to be mapped into the
tenant, you can set key/value attributes. For example:
<user_mapping>
<domain>domain2.yourco.com</domain>
<attributes>
<attribute>
<key>department</key>
<value>development</value>
</attribute>
<attributes>
</user_mapping>
Alternatively, you can map users into the tenant based on their AD group. The
following user mapping maps members of the "lab users" group into the tenant:
<user_mapping>
<domain>domain2.yourco.com</domain>
<groups>
<group>lab users</group>
</groups>
</user_mapping>
You can include more than one <user_mapping> to enable users to be mapped from
any of the specified mappings.
If you included more than one group in a <user_mapping>, the user must belong to all
groups. In the example below, users must belong to both "lab users" and "lab
administrators" groups to be mapped into the tenant.
<user_mapping>
<domain>domain2.yourco.com</domain>
<groups>
<group>lab users</group>
<group>lab administrators</group>
</groups>
</user_mapping>
Response
<tenant>
<creation_time>1378919846777</creation_time>
<id>urn:storageos:TenantOrg:4edc456c-
c7f5-4c54-84b2-29715cc8f504:</id>
<inactive>false</inactive>
<link href="/tenants/urn:storageos:TenantOrg:4edc456c-
c7f5-4c54-84b2-29715cc8f504:" rel="self"/>
<name>EMC tenant</name>
<tags/>
<parent_tenant>
<id>urn:storageos:TenantOrg:e5013f5e-41d7-4cf9-
b1fd-4fecfad0c18c:</id>
<link href="/tenants/
urn:storageos:TenantOrg:e5013f5e-41d7-4cf9-b1fd-4fecfad0c18c:"
rel="self"/>
</parent_tenant>
<user_mappings>
<user_mapping>
<attributes/>
<domain>domain2.yourco.com</domain>
<groups/>
</user_mapping>
</user_mappings>
</tenant>
5. If you want to assign access to a virtual array to the newly created tenant you can use
the following steps.
By default, the access control list (ACL) for a virtual array is wide open and all tenants
have access. Once you assign a tenant to the ACL for a virtual array, only that tenant
will have access unless you assign other tenants to the ACL.
Setting Up Multiple Tenants
76 EMC ViPR 1.1.0 Installation and Configuration Guide