Users must be authorized in
HP SIM in order to run the VSE Management Software tools. To configure
user authorizations, you must be logged into HP SIM as a user with
Full Configuration Rights. Refer to mxuser(1M) for information about viewing and
setting configuration rights. Choose Options
SecurityUsers and Authorizations from the HP SIM menu bar. Use the tabs to view
and change the toolbox authorizations for each user. For detailed
information about creating and updating authorizations, refer to the HP
SIM online help.
The following table defines
the authorization provided by each of the toolboxes associated with
the VSE Management Software. The sections that follow present examples
showing how to configure authorizations based on the user's role.
 |
| |
|
 | NOTE: If your CMS is also a managed system, then any authorizations
required on managed systems will also be required on the CMS.
|
|
| |
|
Role: VSE Operator, VSE Application Administrator, or VSE Capacity
Planner |
|
With these authorizations, you can view
all Integrity and HP 9000 servers in the management domain. You can
examine the configuration of all managed systems through Virtualization
Manager, Partition Manager, Application Discovery, and Virtual Machines Manager.
You can view real-time application data through Application Discovery,
real-time and historical data through gWLM, and historical data through Capacity
Advisor. You cannot make any configuration changes to the managed
systems or Application Discovery components, or edit Capacity Advisor
data with the Profile Editor.
Role: VSE System Administrator |
|
These authorizations provide all of
the capabilities of the VSE Operator role but also allow you to change
the configuration of specific managed systems. On systems authorized
with the All Tools toolbox, you can perform all of the following functions:
Create, modify, and delete nPartitions, virtual
machines, and gWLM shared resource domains.
Install software and perform other system administration
tasks offered through HP SIM.
To specify the subset of systems that are authorized
with All Tools, refer to “Selecting and Updating the Authorized Systems Set”.
Role: VSE Senior System Administrator |
|
These authorizations provide all of the capabilities of the
VSE System Administrator role. In addition, the VSE All Tools authorization
on the CMS allows you to perform all of the following functions:
Create, modify, and delete gWLM policies.
Delete parked
workloads. A workload is “parked” if its container assignment is
set to None -- Park the workload in the Monitored Workload
Definition Properties screen. Parking a workload allows you to retain its
collected data while waiting to migrate the workload to a new system.
The AD All Tools authorization on the CMS allows you to manipulate Application
Discovery agent behavior and modify application template matching and event
reporting.
To specify the subset of systems that are authorized with
All Tools, refer to “Selecting and Updating the Authorized Systems Set”.
Role: VSE Senior Capacity Planner |
|
These authorizations provide all of the capabilities of the
VSE Operator role. In addition, the Capacity Advisor authorization
on the CMS allows you to edit and delete profile data.
Role: Legacy Global Workload Manager Operator |
|
This authorization is maintained for backward compatibility
with gWLM version 1. This user is able to view real-time and
historical reports for any system in the data center that is managed
by gWLM version A.01.x. This user is not
authorized to use Virtualization Manager, Partition Manager, Virtual
Machines Manager, or Capacity Advisor. Because this authorization
cannot be restricted to specific managed systems, HP recommends using
the other authorizations described earlier, which provide more granular
host-based authorization.
Role: Legacy Global Workload Manager Administrator |
|
This authorization is maintained for backward compatibility
with gWLM version 1. This user is able to manage any system
in the data center with gWLM version A.01.x,
but is not authorized to use Virtualization Manager, Partition Manager,
Virtual Machines Manager, or Capacity Advisor. Because this authorization
cannot be restricted to specific managed systems, HP recommends using
the other authorizations described earlier, which provide more granular
host-based authorization.
Selecting and Updating the Authorized Systems Set |
|
When you create an HP SIM authorization, you can select the
individual authorized systems, or you can specify a named collection
of systems. If the authorization is based on a named collection,
it will be applied to the systems that are currently in that collection
when the authorization is created. If additional systems are later
added to that collection or removed from it, you should update the
authorization to match the changed collection.
Use the following procedure to update a user's
authorizations:
Choose OptionsSecurityUsers and Authorizations from the HP SIM menu bar.
Select the Authorizations tab.
Select an authorization that was based on a named
collection and click Update. Confirm that
you want to make the indicated changes by clicking Update
Contents.
For detailed information about creating and updating authorizations,
refer to the HP SIM online help.
Printable version
