Configuration Example; Notes On Access Permissions - Hitachi CB 520H A1 User Manual

LPAR manager operations from the LPAR manager screen
You can use LPAR manager from the LPAR manager screen by logging in to
the CLI console of the management module.
If user authentication of the LP CLI is enabled, the LPAR manager screen is
also subject to role-based access control. The role that is assigned to the
management module user always applies, because the LPAR manager screen
does not support login to LPAR manager. If the role has not been assigned
the LPAR manager security permission, LPAR manager security operations will
be prohibited.

Configuration example

If roles and access permissions are configured as shown below, only the user
who logs in as "Local user A" can perform LPAR manager security operations.
User authentication of the LP
CLI
Administrators role
Users role
User authenticated by LPAR
manager
Management module user

Notes on access permissions

The following are notes on access permissions:
• At least one local user of LPAR manager must be assigned the
Administrators role.
You cannot delete a local user with the Administrators role if that user is
the only user with this role.
• If user authentication of the LP CLI is disabled, you cannot disable the
LPAR manager security permission of the management module user.
If the management module user does not have the LPAR manager
security permission, user authentication of the LP CLI cannot be disabled.
Hitachi Compute Blade 500 Series Logical partitioning manager User's Guide
Item
Types of roles
User category
High Reliability Functions
Enabled
LPAR manager security permission
Have privilege
Do not have privilege
Local user A
(security administrator)
Local user B
(general administrator)
User authenticated by LDAP
User authenticated by RADIUS
Value
Operation
Administrators role
Users role
Users role
Users role
Users role
3-17