Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell PowerFlex v3.6.x User Roles and LDAP Usage Technical Notes

PDF

Local domain roles

When native authentication is used, all roles except Security are defined in a nested manner. Each role is authorized to perform operations related to its definition, in addition to the commands permitted by lower-level roles.

Figure 1. Local domain nested roles model

This image explains the local domain nested roles model, in which any user defined as Administrator may execute any command associated with lesser-privilege roles.
  1. Superuser: Can perform all operations, configuration tasks, and upgrades. There can only be one Superuser, who is always a local user.
  2. Security: Can define administrators and control LDAP. The Security user is not part of the hierarchical model and has a set of commands that only a Security (or Superuser) can perform.
  3. Administrator: Can perform all Configure operations and also define the Configure- and Monitor-level users. Can perform upgrades.
  4. Configure: Does not exist as a default option, but can be configured from FrontendConfigure or BackendConfigure. Can perform upgrades.
  5. FrontendConfigure: Can perform Monitor operations and frontend-related configurations that include volume manipulations (adding, deleting, and mapping volumes and snapshots) and SDC operations (adding and deleting SDCs).
  6. BackendConfigure: Can perform monitoring operations, upgrades, and backend-related configurations. Operations include:
    • Protection Domain and Storage Pool operations
    • Manipulating Fault Sets and SDS
    • Configuring SDS devices
    • Configuring replication
  7. Monitor: Can only perform monitoring operations that do not affect the system.
NOTE:You must assign the BackendConfigure role to the users who need to update the system license.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\