HP 3PAR StoreServ 7200 2-node HP 3PAR Command Line Interface Administrator& - Page 26
Configuring Group-to-Role Mapping Parameters, The HP 3PAR Management Console HP 3PAR MC refers
View all HP 3PAR StoreServ 7200 2-node manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 26 highlights
+ search result DN: cn=hardware,ou=groups,dc=ldaptest,dc=3par,dc=com + search result: cn: hardware + mapping rule: super mapped to by software + rule match: super mapped to by software + mapping rule: edit mapped to by engineering + rule match: edit mapped to by engineering + mapping rule: browse mapped to by hardware + rule match: browse mapped to by hardware user 3paruser is authenticated and authorized • The example above corresponds to Step 6, and shows that 3PARuser is a member of the following hierarchy of groups: ◦ Engineering ◦ Software ◦ Eng ◦ Golfers • In this example, 3PARuser is not yet authenticated or authorized because 3PARuser's group-to-role mapping has not been configured. Configuring Group-to-Role Mapping Parameters Once you have configured the group location parameters, you must now decide what role you wish to assign the users for a given group. To configure group-to-role mapping: 1. Issue the setauthparam command, where: • is one of the following: ◦ super-map-provides Super user rights within the specified group. ◦ service-map-provides Service user rights within the specified group. ◦ edit-map-provides Edit user rights within the specified group. ◦ browse-map-provides Browse user rights within the specified group. ◦ create-map-provides Create user rights within the specified group. ◦ basic_edit-map-provides Basic Edit user rights within the specified group. ◦ 3PAR_AO-map-provides 3PAR AO user rights within the specified group. ◦ 3PAR_RM-map-provides 3PAR RM user rights within the specified group. • is the group to which the user has membership. You can specify multiple groups with multiple arguments. For Active Directory, the group is displayed as a string of information, as shown in the following example: CN=Software,CN=Users,DC=ACME,DC=com NOTE: The HP 3PAR Management Console (HP 3PAR MC) refers to specifiers as Authorization Groups. 2. Repeat Step 1 above if you wish to assign users a different role for another group to which that user has membership. 26 Managing User Accounts and Connections