Dell PowerFlex v3.6.x Security Configuration Guide

PDF

User authorization

User authorization settings control the rights or permissions that are granted to a user to access a resource managed by the product. Local users and LDAP users are supported by the system.

When users are added to the MDM, user role definitions must be assigned to them.

NOTE: Local authentication can be disabled on the PowerFlex Installer / PowerFlex Gateway. For more information, see the "Security" in the Configure and Customize Dell PowerFlex.

Table 1. Local and LDAP User roles and permissions
User role	Query		Configure parameters		Configure user credentials
	Local	LDAP	Local	LDAP	Local	LDAP
Monitor	Yes	Yes	No	No	No
Configurator	Yes	Not Applicable	Yes (an aggregation of both Frontend and Backed Configurator)	Not applicable	No	Not applicable
Backend Configurator	Yes	No	Yes Backend operations only (Protection Domains, Storage Pools, Fault Sets, SDSs, Devices, other system settings)		No	No
Frontend Configurator	Yes	No	Yes Frontend operations only (Volumes, SDCs, Snapshots)		No	No
Administrator	Yes	No	Yes	No	May configure Configurator and Monitor users
Security Roles	No	No	No	No	May define Administrator users and control LDAP
Super User (only one Super User is allowed per system, and it must be a local user)	Yes	Not applicable	Yes	Not applicable	Yes	Not applicable