HP BladeSystem bc2800 Administrator's Guide HP Session Allocation Manager (HP - Page 76

Table 4-1 Effective Hierarchical Policy Example (continued) Parameter Global Role OU SG1 SG2 User Effective 3P6 ON OFF ON OFF ON Not Assigned OFF 1 The order of policy assignment is User (highest) > Security Group > OU > Role > Global Policy (lowest). Individual parameters assigned at the User level override parameters set at the Group level, and so forth. Note that Parameter P2 is set at ON at the Global level, but is overridden by the OFF setting at the higher Role level, leaving an effective setting of OFF. 2 No Overrides Allowed can be set at any level to prevent override by parameters set at higher levels. Note that the No Overrides Allowed setting ON for Parameter P4 at the lowest Global level overrides the OFF setting at the higher Role level. This option does not affect whether or not the effective setting is forced upon the user. The effective setting is always forced. 3 At the Security Group level, HP SAM checks all Security Groups in alphanumeric order and uses the policy, if any, in the first Security Group encountered. Note that Security Group 1 is the first Security Group encountered, so the OFF setting for Security Group 1 leaves Parameter P6 with an effective setting of OFF, and the ON setting for Security Group 2 is ignored. The No Overrides Allowed option is set for a specific setting to prevent inheritance of other policies that would override the setting. Create or Update a Policy To create a new policy, click the Create button and type a new policy name. To update or edit an existing policy, click the policy name hyperlink. When the Update Policy window displays, set the value that you want or leave the value blank to allow it to inherit a value. When you update or create policies, you can view all available properties, or you can specify valid properties for either RGS or RDP. In the Show Properties list, select either ALL, RDP5, RDP6, or RGS to determine which values are active on-screen. NOTE: For more information about RGS, refer to your Remote Graphics Software documentation. View Effective Policy Use this feature to view the effective policy for a given user. See Table 4-1 Effective Hierarchical Policy Example on page 67. 1. Click View Effective Policy. 2. Type the UPN name of the user. 3. Click Go. The hierarchical merge of policies applied to the user is displayed. NOTE: You may also select a Role for the user to view the effective policy based on that Role, since the effective policy can be different with each Role to which that user belongs. 68 Chapter 4 Administration ENWW