Configure and Customize Dell PowerFlex v3.6.x

PDF

User roles

The authorization permissions of each user role are defined differently for native (local domain) and for LDAP authentication. Although the role names are similar, the permissions granted to them are not.

User roles defined in the LDAP domain are mutually exclusive, with no overlap—with the exception of the Configurator role. If you want to give an LDAP user permission to perform both monitoring and configuration roles, for example, assign that user to both the Backend/Frontend Configurator and Monitor LDAP groups.

The Configurator and Super User roles do not exist at all for LDAP.

The following table describes the permissions that can be defined for native users and for LDAP users.

Table 1. Permissions by user type (native or LDAP)This table describes the permissions that can be defined for native users and LDAP users.
User role	Query		Configure parameters		Configure user credentials
User role	Native	LDAP	Native	LDAP	Native	LDAP
Monitor	Yes	Yes	No	No	No	No
Configure (this role is only applicable for local users)	Yes	N/A	Yes (an aggregation of both FrontendConfigure and BackendConfigure)	N/A	No	N/A
BackendConfigure	Yes	No	Yes Backend operations only (Protection Domains, Storage Pools, Fault Sets, SDSs, Devices, other system settings)		No	No
FrontendConfigure	Yes	No	Yes Frontend operations only (Volumes, SDCs, Snapshots)		No	No
Administrator	Yes	No	Yes	No	May configure Configure and Monitor users
Security Roles	No	No	No	No	May define Administrator users and control LDAP
Superuser (only one Superuser is allowed per system, and it must be a local user)	Yes	N/A	Yes	N/A	Yes	N/A