Dell PowerFlex 4.6.x Administration Guide

PDF

User roles

User roles control the activities that can be performed by different types of users, depending on the activities that they perform when using PowerFlex Manager.

Ensure that you configure the active directory before assigning roles. The roles that can be assigned to local users and LDAP users are identical. Each user can only be assigned one role. If an LDAP user is assigned directly to a user role and also to a group role, the LDAP user is provided with permissions of both roles.

NOTE:User definitions are not imported from earlier versions of PowerFlex and must be configured again.

The following table summarizes the activities that can be performed for each user role:

Table 1. User roles and activitiesThe following table summarizes the activities that can be performed for each user role:
Role	Description	Activities
SuperUser	A SuperUser can perform all system operations.	Manage storage resources Manage lifecycle operations, resource groups, templates, deployment, backend operations Manage replication operations, peer systems, RCGs Manage snapshots, snapshot policies Manage users, certificates Replace drives Hardware operations View storage configurations, resource details View platform configuration, resource details System monitoring (events, alerts) Perform serviceability operations Update system settings
SystemAdmin	A SystemAdmin can perform all operations, except for user management and security ones.	Manage storage resources Manage lifecycle operations, resource groups, templates, deployment, backend operations Manage replication operations, peer systems, RCGs Manage snapshots, snapshot policies Replace drives Hardware operations View storage configurations, resource details View platform configuration, resource details System monitoring (events, alerts) Perform serviceability operations Update system settings
StorageAdmin	A StorageAdmin can perform all storage-related front-end operations including element management of already setup NAS and block systems. For example: create volume, create file system, manage file-server user quotas. NOTE:Operations such as create storage pool, create file-server, and add NAS node cannot be performed by StorageAdmin, but can be performed by the LifecycleAdmin role.	Manage storage resources Manage replication operations, peer systems, RCGs Manage snapshots, snapshot policies Replace drives Hardware operations View storage configurations, resource details View platform configuration, resource details System monitoring (events, alerts)
LifecycleAdmin	A LifecycleAdmin can manage the life cycle of hardware and PowerFlex systems.	Manage lifecycle operations, resource groups, templates, deployment, backend operations Replace drives Hardware operations View resource groups and templates System monitoring (events, alerts)
ReplicationManager	The ReplicationManager is a subset of the StorageAdmin role, for work on existing systems for setup and management of replication and snapshots.	Manage replication operations, peer systems, RCGs Manage snapshots, snapshot policies View storage configurations, resource details (volume, snapshot, replication views) System monitoring (events, alerts)
SnapshotManager	SnapshotManager is a subset of StorageAdmin, working only on existing systems. This role includes all operations required to set up and manage snapshots.	Manage snapshots, snapshot policies View storage configurations, resource details System monitoring (events, alerts)
SecurityAdmin	The SecurityAdmin manages PowerFlex role-based access control (RBAC), and LDAP user federation. It includes all security aspects of the system.	Manage users, certificates System monitoring (events, alerts)
DriveReplacer	This is a subset of the Technician role. The DriveReplacer can perform only operations required for a drive replacement.	Replace drives System monitoring (events, alerts)
Technician	The Technician can perform all hardware FRU operations on the system, including entering a node into maintenance mode.	Replace drives Hardware operations System monitoring (events, alerts) Perform serviceability operations
Monitor	The Monitor role has read-only access to the system, including topology, alerts, events, and metrics.	View storage configurations, resource details View platform configuration, resource details System monitoring (events, alerts)
Support	The Support role is a special kind of SystemAdmin (all activities except for user/security management operations) to be used only by Dell Technologies support staff and developers. This user role has access to undocumented, special operations and options for common operations, required only for support purposes. NOTE:This special role should be used only by Dell Technologies support. It opens special, often dangerous, commands for advanced troubleshooting.	Manage storage resources Manage lifecycle operations, resource groups, templates, deployment, backend operations Manage replication operations, peer systems, RCGs Manage snapshots, snapshot policies Replace drives Hardware operations View storage configurations, resource details View platform configuration, resource details System monitoring (events, alerts) Perform serviceability operations Special Dell Technologies Support operations