HP BladeSystem bc2800 Administrator's Guide HP Session Allocation Manager (HP - Page 75

Steps, Policies, User and Roles, Manage resource roles, Manage users, Security Group

Page 75 highlights

The HP SAM hierarchical policy has 5 levels: ● Global ● Role ● OU (organizational unit) ● Security Group ● User Policy settings assigned to User override policy settings assigned to a Security Group, and so forth up the list. Steps: 1. Create or update the policy in the Policies tab. To update an existing policy, click the policy name hyperlink. 2. Assign the policy: ● to a role (User and Roles > Manage resource roles) ● to a user, OU, or Security Group (User and Roles > Manage users) HP SAM always creates the Global Policy. This policy applies to all user connections, unless overridden by other policies. The default sets the Auto Reconnect box to Off. This ensures multiple users do not attempt to log in to the same blade at the same time. When a network failure or something similar occurs, the user may unknowingly have been logged off that resource, depending on the network and AD group policy settings. HP SAM may allocate that computing resource to another user. If the auto-reconnect feature is turned on, the original user reconnects to this computing resource, which could potentially have been allocated to another person. If this is not a concern, then change Auto Reconnect to an appropriate value. Table 4-1 Effective Hierarchical Policy Example Parameter Global Role OU SG1 SG2 User Effective P1 ON Not Assigned Not Assigned Not Assigned Not Assigned Not Assigned ON 1P2 ON OFF Not Assigned Not Assigned Not Assigned Not Assigned OFF P3 ON OFF ON OFF Not Assigned Not Assigned OFF 2P4 ON/No OFF Not Assigned Not Assigned Not Assigned Not Assigned ON Overrides Allowed P5 ON/No OFF/No Not Assigned Not Assigned Not Assigned Not Assigned ON Overrides Overrides Allowed Allowed ENWW HP SAM Administrator Console Tabs 67

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104

The HP SAM hierarchical policy has 5 levels:
Global
Role
OU (organizational unit)
Security Group
User
Policy settings assigned to User override policy settings assigned to a Security Group, and so forth up
the list.
Steps:
1.
Create or update the policy in the
Policies
tab. To update an existing policy, click the policy name
hyperlink.
2.
Assign the policy:
to a role (
User and Roles
>
Manage resource roles
)
to a user, OU, or Security Group (
User and Roles
>
Manage users
)
HP SAM always creates the Global Policy. This policy applies to all user connections, unless overridden
by other policies. The default sets the Auto Reconnect box to Off. This ensures multiple users do not
attempt to log in to the same blade at the same time. When a network failure or something similar occurs,
the user may unknowingly have been logged off that resource, depending on the network and AD group
policy settings. HP SAM may allocate that computing resource to another user. If the auto-reconnect
feature is turned on, the original user reconnects to this computing resource, which could potentially
have been allocated to another person. If this is not a concern, then change Auto Reconnect to an
appropriate value.
Table 4-1
Effective Hierarchical Policy Example
Parameter
Global
Role
OU
SG1
SG2
User
Effective
P1
ON
Not Assigned
Not Assigned
Not Assigned
Not Assigned
Not Assigned
ON
1
P2
ON
OFF
Not Assigned
Not Assigned
Not Assigned
Not Assigned
OFF
P3
ON
OFF
ON
OFF
Not Assigned
Not Assigned
OFF
2
P4
ON/No
Overrides
Allowed
OFF
Not Assigned
Not Assigned
Not Assigned
Not Assigned
ON
P5
ON/No
Overrides
Allowed
OFF/No
Overrides
Allowed
Not Assigned
Not Assigned
Not Assigned
Not Assigned
ON
ENWW
HP SAM Administrator Console Tabs
67