Modify user or group

Use this page to modify user or group properties for a Storage Authentication Service or LDAP policy on the IBM® TS7700 Grid.

Note: The following topic has been added to the TS7700 Service Information Center for reference only. LDAP setup and administration is a customer task. Contact the customer to obtain an LDAP user ID and password.
To modify a user or group belonging to a Storage Authentication Service or LDAP policy:
  1. From the Modify External Policy page, navigate to the External Policy Users/Groups table.
  2. Select the radio button next to the user or group you want to modify.
  3. Select Modify... from the Select Action drop-down menu.
  4. Click Go to open the Modify User or Modify Group page.
    Note: You cannot modify the User Name or Group Name.
  5. Modify values for any of the following fields:
    Role
    The role assigned to the user account. The role can a predefined role or a user-defined role. Possible values are:
    Operator
    The operator has access to monitoring information, but is restricted from changing settings for performance, network configuration, feature licenses, user accounts, or custom roles. The operator is also restricted from inserting and deleting virtual volumes.
    Lead Operator
    The lead operator has access to monitoring information and can perform actions for volume operation. The lead operator has nearly identical permissions to the administrator, but cannot change network configuration, feature licenses, user accounts, or custom roles.
    Administrator
    The administrator has the highest level of authority and can view all pages and perform all actions, including addition and removal of user accounts. The administrator has access to all service functions and TS7700 resources except the Service Login.
    Manager
    The manager has access to monitoring information and performance data and functions, and can add, modify, or delete user accounts. The manager is restricted from changing most other settings.
    Read Only
    The read only role can view all pages but cannot perform any actions. You can make any custom role read-only by applying the Read Only role template to the custom role.
    Custom roles
    The administrator can name and define 10 custom roles by selecting individual tasks that are permitted to each custom role. Tasks can be assigned to a custom role in the Roles and assigned permissions table from the Roles & Permissions Properties page.
    Note: You can backup these settings as part of the ts7700_cluster<cluster ID>.xmi file and restore them for later use or use with another cluster.
    Cluster Access
    The clusters the user has access to. A user can have access to multiple clusters.
  6. Click OK to complete the operation. Click Cancel to abandon the operation and return to the Modify External Policy page.