Modify user or group
Use this page to modify user or group properties for a Storage Authentication Service or LDAP policy on the IBM® TS7700 Grid.
Note: The following
topic has been added to the TS7700 Service Information Center for
reference only. LDAP setup and administration is a customer task.
Contact the customer to obtain an LDAP user ID and password.
To modify a user or group belonging to a Storage Authentication
Service or LDAP policy:
- From the Modify External Policy page, navigate to the External Policy Users/Groups table.
- Select the radio button next to the user or group you want to modify.
- Select Modify... from the Select Action drop-down menu.
- Click Go to open the Modify User or Modify
Group page. Note: You cannot modify the User Name or Group Name.
- Modify values for any of the following fields:
- Role
- The role assigned to the user account. The role can a predefined role or a user-defined role.
Possible values are:
- Operator
- The operator has access to monitoring information, but is restricted from changing settings for performance, network configuration, feature licenses, user accounts, or custom roles. The operator is also restricted from inserting and deleting virtual volumes.
- Lead Operator
- The lead operator has access to monitoring information and can perform actions for volume operation. The lead operator has nearly identical permissions to the administrator, but cannot change network configuration, feature licenses, user accounts, or custom roles.
- Administrator
- The administrator has the highest level of authority and can view all pages and perform all actions, including addition and removal of user accounts. The administrator has access to all service functions and TS7700 resources except the Service Login.
- Manager
- The manager has access to monitoring information and performance data and functions, and can add, modify, or delete user accounts. The manager is restricted from changing most other settings.
- Read Only
- The read only role can view all pages but cannot perform any actions. You can make any custom role read-only by applying the Read Only role template to the custom role.
- Custom roles
- The administrator can name and define 10 custom roles by selecting individual tasks that are permitted to each custom role. Tasks can be assigned to a custom role in the Roles and assigned permissions table from the Roles & Permissions Properties page.
- Cluster Access
- The clusters the user has access to. A user can have access to multiple clusters.
- Click OK to complete the operation. Click Cancel to abandon the operation and return to the Modify External Policy page.