Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP VSE Management Software Version 4.1 Installation and Update Guide for HP-UX > Chapter 4 Configure VSE Management Software

Configuring User Authorizations

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Index

Users must be authorized in HP SIM in order to run the VSE Management Software tools. To configure user authorizations, you must be logged into HP SIM as a user with Full Configuration Rights. Refer to mxuser(1M) for information about viewing and setting configuration rights. Choose Options->Security->Users and Authorizations from the HP SIM menu bar. Use the tabs to view and change the toolbox authorizations for each user. For detailed information about creating and updating authorizations, refer to the HP SIM online help.

The following table defines the authorization provided by each of the toolboxes associated with the VSE Management Software. The sections that follow present examples showing how to configure authorizations based on the user's role.

NOTE: If your CMS is also a managed system, then any authorizations required on managed systems will also be required on the CMS.

ToolboxRequired Authorizations
All ToolsThis is a master toolbox that applies to all tools installed in HP SIM. Authorize this toolbox on selected systems for users whose role requires administrative authority on those systems. Refer to the following sections for examples.
Monitor ToolsVSE Management Software users should have this authorization on the CMS and All Managed Systems. Otherwise, they will not have access to HP SIM monitoring tools such as the System Page or Property Pages.
Capacity AdvisorAuthorize this toolbox on managed systems to allow use of Capacity Advisor on those systems. Authorize this toolbox on the CMS to allow users to edit data with the Profile Editor.
VSE All ToolsAuthorize this toolbox on managed systems to allow users to view and manage those systems using Virtualization Manager, Global Workload Manager, Capacity Advisor, and VM Manager. This toolbox also allows users to manage application and process data collection using Application Discovery. Authorize on the CMS only if the CMS will also be a managed system.
VSE MonitorVSE Management Software users should have this authorization on the CMS and All Managed Systems. Otherwise, they will not be able to use the Tools->VSE Management... action on the HP SIM menu bar or VSE Management product menus. Authorize this toolbox on the CMS to allow view-only use of Application Discovery.
gWLM All ToolsAuthorize this toolbox on the CMS to allow users to view and manage systems using gWLM version A.01.x. For gWLM version A.02.00.00 or later, this toolbox is not used; authorize VSE All Tools instead.
gWLM MonitorAuthorize this toolbox on the CMS to allow view-only use of gWLM version A.01.x. For gWLM version A.02.00.00 or later, this toolbox is not used; authorize VSE Monitor instead.
VCEM Full AccessAuthorize this toolbox to allow full access to HP Virtual Connect Enterprise Manager. This authorization permits viewing and modifying the VCEM configuration.
VCEM Read OnlyAuthorize this toolbox to allow read-only access to HP Virtual Connect Enterprise Manager. This authorization permits viewing but not modifying the VCEM configuration.

Role: VSE Operator, VSE Application Administrator, or VSE Capacity Planner

With these authorizations, you can view all Integrity and HP 9000 servers in the management domain. You can examine the configuration of all managed systems through Virtualization Manager, Partition Manager, Application Discovery, and Virtual Machines Manager. You can define and view a logical server using Virtualization Manager. You can view real-time application data through Application Discovery, real-time and historical data through gWLM, and historical data through Capacity Advisor. You cannot make any configuration changes to the managed systems or Application Discovery components, or edit Capacity Advisor data with the Profile Editor.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems

Role: VSE System Administrator

These authorizations provide all of the capabilities of the VSE Operator role but also allow you to change the configuration of specific managed systems. On systems authorized with the All Tools toolbox, you can perform all of the following functions:

  • Create, modify, and delete nPartitions, virtual machines, and gWLM shared resource domains.

  • Install software and perform other system administration tasks offered through HP SIM.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems
All Tools Subset of All Managed Systems

To specify the subset of systems that are authorized with All Tools, refer to “Selecting and Updating the Authorized Systems Set”.

Role: VSE Senior System Administrator

These authorizations provide all of the capabilities of the VSE System Administrator role. In addition, the VSE All Tools authorization on the CMS allows you to perform all of the following functions:

  • Create, modify, and delete gWLM policies.

  • Delete parked workloads. A workload is “parked” if its container assignment is set to None -- Park the workload in the Monitored Workload Definition Properties screen. Parking a workload allows you to retain its collected data while waiting to migrate the workload to a new system.

  • Perform operations on logical servers, including activate, copy, create, deactivate, delete, drop, import, modify, or move a logical server, and manage logical server storage pools.

  • Manipulate Application Discovery agent behavior and modify application template matching and event reporting.

ToolboxSystems Authorized
VSE All ToolsCMS
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorAll Managed Systems
All Tools Subset of All Managed Systems

To specify the subset of systems that are authorized with All Tools, refer to “Selecting and Updating the Authorized Systems Set”.

Role: VSE Senior Capacity Planner

These authorizations provide all of the capabilities of the VSE Operator role. In addition, the Capacity Advisor authorization on the CMS allows you to edit and delete profile data.

ToolboxSystems Authorized
Monitor ToolsCMS and All Managed Systems
VSE MonitorCMS and All Managed Systems
Capacity AdvisorCMS and All Managed Systems

Role: Legacy Global Workload Manager Operator

This authorization is maintained for backward compatibility with gWLM version 1. This user is able to view real-time and historical reports for any system in the data center that is managed by gWLM version A.01.x. This user is not authorized to use Virtualization Manager, Partition Manager, Virtual Machines Manager, or Capacity Advisor. Because this authorization cannot be restricted to specific managed systems, HP recommends using the other authorizations described earlier, which provide more granular host-based authorization.

ToolboxSystems Authorized
gWLM MonitorCMS

Role: Legacy Global Workload Manager Administrator

This authorization is maintained for backward compatibility with gWLM version 1. This user is able to manage any system in the data center with gWLM version A.01.x, but is not authorized to use Virtualization Manager, Partition Manager, Virtual Machines Manager, or Capacity Advisor. Because this authorization cannot be restricted to specific managed systems, HP recommends using the other authorizations described earlier, which provide more granular host-based authorization.

ToolboxSystems Authorized
gWLM All ToolsCMS

Selecting and Updating the Authorized Systems Set

When you create an HP SIM authorization, you can select the individual authorized systems, or you can specify a named collection of systems. If the authorization is based on a named collection, it will be applied to the systems that are currently in that collection when the authorization is created. If additional systems are later added to that collection or removed from it, you should update the authorization to match the changed collection.

Use the following procedure to update a user's authorizations:

  1. Choose Options->Security->Users and Authorizations from the HP SIM menu bar.

  2. Select the Authorizations tab.

  3. Select an authorization that was based on a named collection and click Update. Confirm that you want to make the indicated changes by clicking Update Contents.

For detailed information about creating and updating authorizations, refer to the HP SIM online help.

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2006-2008 Hewlett-Packard Development Company, L.P.