Manage Task and Resource Roles

Use this task to define and customize user roles.

Note: Predefined roles (default roles) cannot be modified.

A user role is a collection of authorizations. A user role can be created to define the set of tasks allowed for a given class of user (task roles) or it can be created to define the set of managed objects that are manageable for a user (managed resource roles). Once you have defined or customized the user roles you can use the Manage User Profiles and Access task to create new users with their own permissions.

If the automatic resource role update function is enabled on the Hardware Management Console (HMC) either through the command line interface or through the Rest API CLI runner job, the HMC user can automatically receive permission to the logical partition that is created. If the logical partition is deleted, the permission is automatically revoked.

The predefined managed resource roles include:
  • All System Resources
The predefined task roles include:
  • hmcservicerep (Service Representative)
  • hmcviewer (Viewer)
  • hmcoperator (Operator)
  • hmcpe (Product Engineer)
  • hmcsuperadmin (Super Administrator)

To customize managed resource roles or task roles:

  1. In the navigation area, select the managed system and click the Users and Security icon , and then select Users and Roles.
  2. In the content pane, click Manage Task and Resource Roles.
  3. From the Manage Task and Resource Roles window, select either Managed Resource Roles or Task Roles.
  4. To add a role, click Edit from the menu bar, then click Add to create a new role.

    or

    To copy, remove, or modify an existing role, select the object you want to customize, click Edit from the menu bar, then click Copy, Remove, or Modify.

  5. Click Exit when you are have completed the task.

Use the online Help to get additional information for customizing managed resource roles and task roles.