HP CloudSystem Foundation Guide de l'utilisateur télécharger pdf (Page 60)

e. Select the role.

The role assignment specifies the permission level for all users in the group. See About

user roles (page 52) for more information.

NOTE: If you are using an external authentication directory service, in the CloudSystem

Console, the role assignment is made to the group rather than to individual users.

Therefore, all users in a group who log in to the CloudSystem Console have the same

role assignment (for example, Full or Read only). However, in the CloudSystem Portal,

roles are assigned to users per project, and groups are not recognized. Users who log

in to the CloudSystem Portal can have different roles (for example, Admin or Member).

3. Click Add to add the group and return to the Users and Groups screen, or click Add+ to add

another group.

Set an authentication directory service as the default directory

Initially, the default directory is the local directory of user accounts.

• You can designate an authentication directory service as the default directory.

IMPORTANT: You must set a default directory. Only users in authorized groups of the default

directory can log in to the CloudSystem Portal.

Setting a default directory enables directory service authentication. See Setting an authentication

directory service as the default directory (page 60).

• If you added more than one authentication directory service, you can select a directory as the

default directory.

On the CloudSystem Console login screen, you see the names of all configured directories under

the user name and password boxes. When you log in, you select the directory. The default directory

is at the top of the list and is selected by default.

On the CloudSystem Portal login screen, the user name and password boxes are displayed.

CloudSystem automatically authenticates the user against the default directory.

IMPORTANT: If you configure more than one directory service, ensure that the directories do not

use the same user name to identify different individuals. For example,

smith.lab.users.example1.com, smith.marketing.users.example1.com, and

smith.marketing.users.example2.com are all authenticated as the user name smith.

If you have more than one directory that contains the same user name, changing the default

directory in the CloudSystem Console can allow CloudSystem Portal users to view and change

resources in projects for which they are not authorized. See About directory service authentication

(page 53).

Prerequisites

• Minimum required privileges: Infrastructure administrator

• At least one authentication directory service must be available on the appliance. See Add a

directory service (page 55).

Procedure 18 Setting an authentication directory service as the default directory

1. From the main menu, select Settings.

2. Click the Edit icon in the Security area.

3. Select an authentication directory service under Directories on the Edit Security screen.

4. Click OK.

60 Manage users and groups

1 2 ... 55 56 57 58 59 60 61 62 63 64 65 ... 210 211

Commentaires sur ces manuels

Pas de commentaire

HP CloudSystem Foundation Guide de l'utilisateur Page 60

Commentaires sur ces manuels

Produits connexes et manuels pour Logiciel HP CloudSystem Foundation