Hp Insight Management-Software Manuel d'utilisateur télécharger pdf (Page 12)

Table 2 RBAC privileges (continued)

VCEM User

(read only)

VCEM

Group

Limited

Operator

VCEM

Group

Operator

VCEM

Group

Administrator

VCEM

AdministratorCommand line options

xxxx-poweroff enclosurename

xxxx-poweron enclosurename

xxxxx-show power-status

xxx-set iscsi-boot-param

xxx-remove iscsi-boot-param

xxxxx-show job

xxxxx-show version

xxxxx-show vcem-status

xx-startvcdmaint

xx-cancelvcdmaint

xx-completevcdmaint

xxxxx-export

VCEMCLI commands for read operations require minimum VCEM privilege, whereas write operations

require full privilege to the affected resource. You can set up the VCEM privilege from the Systems

Insight Manager Options→Security→Users and Authorizations. If the minimum RBAC is not met,

VCEMCLI reports an error. The error message contains a description of the reason for the failure.

RBAC Best Practices

In configurations where VCEM is used in conjunction with an upper-level manager such as HP

Matrix Operating Environment or HP Matrix OE logical server management, ensure that operations

invoked through VCEMCLI do not disrupt the functioning of the upper-level manager. The VCEM

User Interface warns the administrator when it detects the risk of conflict, however VCEMCLI will

not. See “Using VCEM commands” (page 18) for more information on which commands can

cause disruption of upper-level managers.

You can configure Systems Insight Manager using role-based access control to prevent conflicts

between VCEM and upper-level managers by not allowing changes to resources which would

disrupt the upper-level manager.

To prevent conflicts:

• Define specific Systems Insight Manager users for VCEM and VCEMCLI.

• Define additional Systems Insight Manager users for upper-level managers.

• If needed, roles can be removed from the VCEM users to prevent conflict with upper-level

managers.

• Set permissions on VC Domain Groups so only specific Systems Insight Manager users can

access them.

• Confirm that the scripts specify the correct username and password credentials to ensure that

they are granted only the appropriate level of permissions.

• Ensure that NTFS permissions are set on the scripts on the CMS so that they are accessible

only to the CMS users who are authorized to run them.

12 Using VCEMCLI

1 2 ... 7 8 9 10 11 12 13 14 15 16 17 ... 95 96

Commentaires sur ces manuels

Pas de commentaire

Hp Insight Management-Software Manuel d'utilisateur Page 12

Commentaires sur ces manuels

Produits connexes et manuels pour Logiciel Hp Insight Management-Software