Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
VSE Management Software Version 4.0 Getting Started Guide > Chapter 3 Configuration

Configuring User Authorizations

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

Users must be authorized in HP SIM to run the VSE Management Software tools. To configure user authorizations, you must be logged into HP SIM as a user with Full Configuration Rights. See mxuser(1M) for information about viewing and setting configuration rights. Choose Options->Security->Users and Authorizations from the HP SIM menu bar. Use the tabs to view and change the toolbox authorizations for each user. For detailed information about creating and updating authorizations, see the HP SIM online help.

The following table defines the authorization provided by each of the toolboxes associated with the VSE Management Software. The sections that follow present examples showing how to configure authorizations based on the user's role.

NOTE: If your CMS is also a managed system, then any authorizations required on managed systems will also be required on the CMS.

ToolboxRequired Authorizations
All ToolsThis is a master toolbox that applies to all tools installed in HP SIM. Authorize this toolbox on selected systems for users whose role requires administrative authority on those systems. See the following sections for examples.
Monitor ToolsVSE Management Software users should have this authorization on the CMS and All Managed Systems. Otherwise, they will not have access to HP SIM monitoring tools such as the System Page or Property Pages.
Capacity AdvisorAuthorize this toolbox on managed systems to allow use of Capacity Advisor on those systems. Authorize this toolbox on the CMS to allow users to edit data with the Profile Editor.
VSE All ToolsAuthorize this toolbox on managed systems to allow users to view and manage those systems using Virtualization Manager, Global Workload Manager, Capacity Advisor, VM Manager, and Process Resource Manager. This toolbox also allows use of the Power Editor to edit the power settings of a managed system. Authorize on the CMS only if the CMS will also be a managed system.
VSE MonitorVSE Management Software users should have this authorization on the CMS and All Managed Systems. Otherwise, they will not be able to use the Tools->VSE Management... action on the HP SIM menu bar or VSE Management product menus.
gWLM All ToolsAuthorize this toolbox on the CMS to allow users to view and manage gWLM configuration data on the CMS and all managed systems, even if those systems are not currently visible or known to HP SIM. To authorize use of gWLM on a subset of systems, you must instead authorize VSE All Tools for the desired set of managed systems.
gWLM MonitorAuthorize this toolbox on the CMS to allow users to view gWLM configuration and historic data for all systems managed by gWLM. To authorize monitoring of gWLM on a subset of systems, you must instead authorize VSE Monitor for the desired set of managed systems.
AD All ToolsAuthorize this toolbox on the CMS to allow users to manage application and process data collection using Application Discovery. This authorization level permits entry into Application Discovery from other VSE tools.
AD MonitorAuthorize this toolbox on the CMS to allow view-only use of Application Discovery. This authorization level permits entry into Application Discovery from other VSE tools.
VCEM Full AccessAuthorize this toolbox to allow full access to HP Virtual Connect Enterprise Manager. This authorization permits viewing and modifying the VCEM configuration.
VCEM Read OnlyAuthorize this toolbox to allow read-only access to HP Virtual Connect Enterprise Manager. This authorization permits viewing but not modifying the VCEM configuration.
PRM All ToolsAuthorize this toolbox on managed systems to allow users to monitor and configure the Process Resource Manager Groups on those systems. Authorize on the CMS only if the CMS will also be a managed system.
PRM MonitorAuthorize this toolbox on managed systems to allow users to monitor the Process Resource Manager Groups. Authorize on the CMS only if the CMS will also be a managed system.

Role: VSE Operator, VSE Application Administrator, or VSE Capacity Planner

With these authorizations, you can view all Integrity and HP 9000 servers in the management domain. You can examine the configuration of all managed systems through Virtualization Manager, Partition Manager, Application Discovery, and Virtual Machines Manager. You can define and view a logical server using Virtualization Manager. You can view real-time application data through Application Discovery, real-time and historical data through gWLM, and historical data through Capacity Advisor. You cannot make any configuration changes to the managed systems or Application Discovery components, or edit Capacity Advisor data with the Profile Editor.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems
AD MonitorCMS and All Managed Systems

Role: VSE System Administrator

These authorizations provide all of the capabilities of the VSE Operator role but also allow you to change the configuration of specific managed systems. On systems authorized with the All Tools toolbox, you can perform all of the following functions:

  • Create, modify, and delete nPartitions, virtual machines, and gWLM shared resource domains.

  • Install software and perform other system administration tasks offered through HP SIM.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems
AD MonitorCMS and All Managed Systems
All Tools Subset of All Managed Systems

To specify the subset of systems that are authorized with All Tools, see“Selecting and Updating the Authorized Systems Set”.

Role: VSE Senior System Administrator

These authorizations provide all of the capabilities of the VSE System Administrator role. In addition, the VSE All Tools authorization on the CMS allows you to perform all of the following functions:

  • Create, modify, and delete gWLM policies.

  • Delete parked workloads. A workload is “parked” if its container assignment is set to None -- Park the workload in the Monitored Workload Definition Properties screen. Parking a workload allows you to retain its collected data while waiting to migrate the workload to a new system.

  • Perform operations on logical servers, including activate, copy, create, deactivate, delete, drop, import, modify, or move a logical server, and manage logical server storage pools.

The AD All Tools authorization on the CMS allows you to manipulate Application Discovery agent behavior and modify application template matching and event reporting.

ToolboxSystems Authorized
VSE All ToolsCMS
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems
AD All ToolsCMS
All Tools Subset of All Managed Systems

To specify the subset of systems that are authorized with All Tools, see“Selecting and Updating the Authorized Systems Set”.

Role: VSE Senior Capacity Planner

These authorizations provide all of the capabilities of the VSE Operator role. In addition, the Capacity Advisor authorization on the CMS allows you to edit and delete profile data.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorCMS and All Managed Systems
AD MonitorCMS and All Managed Systems

Role: PRM Administrator

With these authorizations, you can examine the configuration of all managed systems through Virtualization Manager. You can monitor and configure the amount of CPU, memory, and disk bandwidth resources used by Process Resource Manager Groups on the CMS and managed systems.

ToolboxSystems Authorized
VSE MonitorCMS and All Managed Systems
PRM All ToolsCMS and All Managed Systems

Role: PRM Operator

With these authorizations, you can examine the configuration of all managed systems through Virtualization Manager. You can monitor the amount of CPU, memory, and disk bandwidth resources used by Process Resource Manager Groups on the CMS and managed systems. You cannot make any configuration changes to the Process Resource Manager Groups.

ToolboxSystems Authorized
VSE MonitorCMS and All Managed Systems
PRM MonitorCMS and All Managed Systems

Role: Legacy Global Workload Manager Operator

This authorization is maintained for backward compatibility with gWLM version 1. This user is able to view real-time and historical reports for any system in the data center that is managed by gWLM version A.01.x. This user is not authorized to use Virtualization Manager, Partition Manager, Virtual Machines Manager, or Capacity Advisor. Because this authorization cannot be restricted to specific managed systems, HP recommends using the other authorizations described earlier, which provide more granular host-based authorization.

ToolboxSystems Authorized
gWLM MonitorCMS

Role: Legacy Global Workload Manager Administrator

This authorization is maintained for backward compatibility with gWLM version 1. This user is able to manage any system in the data center with gWLM version A.01.x, but is not authorized to use Virtualization Manager, Partition Manager, Virtual Machines Manager, or Capacity Advisor. Because this authorization cannot be restricted to specific managed systems, HP recommends using the other authorizations described earlier, which provide more granular host-based authorization.

ToolboxSystems Authorized
gWLM All ToolsCMS

Selecting and Updating the Authorized Systems Set

When you create an HP SIM authorization, you can select the individual authorized systems, or you can specify a named collection of systems. If the authorization is based on a named collection, it will be applied to the systems that are currently in that collection when the authorization is created. If additional systems are later added to that collection or removed from it, you should update the authorization to match the changed collection.

Use the following procedure to update a user's authorizations:

  1. Choose Options->Security->Users and Authorizations from the HP SIM menu bar.

  2. Select the Authorizations tab.

  3. Select an authorization that was based on a named collection and click Update. Confirm that you want to make the indicated changes by clicking Update Contents.

For detailed information about creating and updating authorizations, see the HP SIM online help.

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2006-2008 Hewlett-Packard Development Company, L.P.