User Roles and Policies

This appendix describes user roles and policies.

Roles

When creating a user account, at least one role must be applied.

There are two types of roles: a default role and a custom role. The default role is already prepared in the storage system and the custom role can be managed by the user.

Default role

Use the default roles for normal operation. Default roles cannot be deleted. The default role settings cannot be changed.

The following shows the default roles and policies that are applied to each default role.

Policies	Default roles
Policies	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer	Software (*1)
Status Display	OK	OK	OK	NG	OK	OK	NG
RAID Group Management	NG	OK	OK	NG	NG	OK	NG
Volume - Create / Modify	NG	OK	OK	NG	NG	OK	NG
Volume - Delete / Format	NG	OK	OK	NG	NG	OK	NG
Host Interface Management	NG	OK	OK	NG	NG	OK	NG
NAS Management	NG	OK	OK	NG	NG	OK	NG
Advanced Copy Management	NG	OK	OK	NG	NG	OK	NG
Copy Session Management	NG	OK	OK	NG	NG	OK	NG
Storage Migration Management	NG	OK	OK	NG	NG	OK	NG
Storage Management	NG	OK	NG	NG	NG	OK	NG
User Management	NG	OK	NG	OK	NG	NG	NG
Authentication / Role	NG	OK	NG	OK	NG	NG	NG
Security Setting	NG	OK	NG	NG	OK	NG	NG
Maintenance Information	NG	OK	NG	NG	OK	OK	NG
Firmware Management	NG	OK	NG	NG	NG	OK	NG
Maintenance Operation	NG	NG	NG	NG	NG	OK	NG

OK: Available NG: Not available

"Software" is the role that is used for external software. A user account with the "Software" role cannot log in to Web GUI.

Custom role

Create custom roles when the operating environment cannot be configured by default roles.

Custom roles have unique names that do not match the existing roles. Policies are applied for custom roles.

Multiple policies can be applied to one custom role.

Refer to the following for the procedure on setting custom roles.

Add Role

This function creates custom roles.
Delete Role

This function deletes custom roles.
Modify Role

This function changes custom role settings.

Availability of Functions for Each Policy

Functions that can be used vary depending on the policy.

The available functions for each policy are described below.

"Software" is the default role that is used for external software. A user account with the "Software" role cannot log in to Web GUI. Therefore, "Software" is omitted in the following tables.

Overview (Display)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Overview	Any policy	OK	OK	OK	OK	OK	OK

Volume Management (Display)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Volume (Basic Information)	One of the following policies is required: Status Display Volume - Create / Modify Volume - Delete / Format Host Interface Management Maintenance Operation	OK	OK	OK	NG	OK	OK
Performance (Host I/O)	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Performance (QoS)	One of the following policies is required: Status Display Volume - Create / Modify	OK	OK	OK	NG	OK	OK
Performance (Advanced Copy)	Status Display	OK	OK	OK	NG	OK	OK
LUN Group	One of the following policies is required: Status Display Host Interface Management	OK	OK	OK	NG	OK	OK
Reservation		OK	OK	OK	NG	OK	OK
Pinned Data	One of the following policies is required: Status Display Maintenance Operation	OK	OK	OK	NG	OK	OK
Bad Sector		OK	OK	OK	NG	OK	OK
Balancing Thin Provisioning Volume	One of the following policies is required: Status Display Volume - Create / Modify	OK	OK	OK	NG	OK	OK
Snapshot	One of the following policies is required: Status Display NAS Management	OK	OK	OK	NG	OK	OK

Volume Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create Volume	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Delete Volume	Volume - Delete / Format	NG	OK	OK	NG	NG	OK
Rename Volume	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Format Volume	Volume - Delete / Format	NG	OK	OK	NG	NG	OK
Expand Volume	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Encrypt Volume		NG	OK	OK	NG	NG	OK
Expand Thin Provisioning Volume		NG	OK	OK	NG	NG	OK
Modify Thin Provisioning Volume Threshold		NG	OK	OK	NG	NG	OK
Optimize TPV/FTV Capacity		NG	OK	OK	NG	NG	OK
Cancel Optimizing TPV/FTV Capacity		NG	OK	OK	NG	NG	OK
Start Balancing Thin Provisioning Volume		NG	OK	OK	NG	NG	OK
Stop Balancing Thin Provisioning Volume		NG	OK	OK	NG	NG	OK
Reconfigure NAS Volume		NG	OK	OK	NG	NG	OK
Set Allocation		NG	OK	OK	NG	NG	OK
Delete Snap Data Pool Volume	Volume - Delete / Format	NG	OK	OK	NG	NG	OK
Force Delete Snap Data Pool Volume		NG	OK	OK	NG	NG	OK
Initialize Snap Data Volume		NG	OK	OK	NG	NG	OK
Start RAID Migration (*1)	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Stop RAID Migration		NG	OK	OK	NG	NG	OK
Stop External Volume Data Synchronization		NG	OK	OK	NG	NG	OK
Forbid Advanced Copy		NG	OK	OK	NG	NG	OK
Permit Advanced Copy		NG	OK	OK	NG	NG	OK
Release Reservation	Host Interface Management	NG	OK	OK	NG	NG	OK
Pinned Data	Maintenance Operation	NG	NG	NG	NG	NG	OK
Destage Pinned Data		NG	NG	NG	NG	NG	OK
Delete Pinned Data		NG	NG	NG	NG	NG	OK
Export Pinned Data		NG	NG	NG	NG	NG	OK
Data Container Volume Diagnosis		NG	NG	NG	NG	NG	OK
Modify Cache Parameters	One of the following policies is required: Volume - Create / Modify Maintenance Operation	NG	OK	OK	NG	NG	OK
Export Cache Parameters	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Export Performance Information	Status Display	OK	OK	OK	NG	OK	OK
Set ALUA (*2)	Host Interface Management	NG	OK	OK	NG	NG	OK
Set Volume QoS	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Set Volume QoS Pattern	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Set Snapshot	NAS Management	NG	OK	OK	NG	NG	OK
Delete Snapshot		NG	OK	OK	NG	NG	OK
Start Snapshot		NG	OK	OK	NG	NG	OK
Stop Snapshot		NG	OK	OK	NG	NG	OK
Delete External LU Information	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Change Data Reduction Processing CM	Volume - Create / Modify	NG	OK	OK	NG	NG	OK

*1	:	To execute a RAID migration from an encrypted volume to an unencrypted volume, the "Security Setting" policy is required.
*2	:	When this function is used, the "Volume - Create / Modify" or "Maintenance Operation" policy is also required to display the status screen.

RAID Group Management (Display)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
RAID Group (Basic Information)	One of the following policies is required: Status Display RAID Group Management Volume - Create / Modify Maintenance Operation	OK	OK	OK	NG	OK	OK
Tuning	One of the following policies is required: Status Display RAID Group Management	OK	OK	OK	NG	OK	OK
Eco-mode Schedule (RAID Group)		OK	OK	OK	NG	OK	OK
SED Key Group		OK	OK	OK	NG	OK	OK
External RAID Group	One of the following policies is required: Status Display RAID Group Management Maintenance Operation	OK	OK	OK	NG	OK	OK

RAID Group Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create RAID Group	RAID Group Management	NG	OK	OK	NG	NG	OK
Delete RAID Group		NG	OK	OK	NG	NG	OK
Rename RAID Group		NG	OK	OK	NG	NG	OK
Change Controlling CM		NG	OK	OK	NG	NG	OK
Expand RAID Group		NG	OK	OK	NG	NG	OK
Modify RAID Group Parameters		NG	OK	OK	NG	NG	OK
Assign Eco-mode Schedule (RAID Group)		NG	OK	OK	NG	NG	OK
Set Key Group (RAID Group)	All of the following policies are required: RAID Group Management Security Setting	NG	OK	NG	NG	NG	NG
Recovery SED		NG	OK	NG	NG	NG	NG

External RAID Group Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create External RAID Group	RAID Group Management	NG	OK	OK	NG	NG	OK
Delete External RAID Group		NG	OK	OK	NG	NG	OK
Recover External RAID Group		NG	OK	OK	NG	NG	OK

Thin Provisioning Management (Display)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Thin Provisioning Pool (Basic Information)	One of the following policies is required: Status Display RAID Group Management Volume - Create / Modify Volume - Delete / Format	OK	OK	OK	NG	OK	OK
Threshold (Thin Provisioning Pool)	One of the following policies is required: Status Display RAID Group Management	OK	OK	OK	NG	OK	OK
Eco-mode Schedule (Thin Provisioning Pool)		OK	OK	OK	NG	OK	OK
Flexible Tier Pool (Basic Information)	One of the following policies is required: Status Display RAID Group Management Volume - Delete / Format	OK	OK	OK	NG	OK	OK
Settings (Thin Provisioning)	RAID Group Management	NG	OK	OK	NG	NG	OK

Thin Provisioning Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Set Thin Provisioning (*1)	Storage Management	NG	OK	NG	NG	NG	OK
Create Thin Provisioning Pool	RAID Group Management	NG	OK	OK	NG	NG	OK
Delete Thin Provisioning Pool		NG	OK	OK	NG	NG	OK
Rename Thin Provisioning Pool		NG	OK	OK	NG	NG	OK
Expand Thin Provisioning Pool		NG	OK	OK	NG	NG	OK
Format Thin Provisioning Pool (All Area)		NG	OK	OK	NG	NG	OK
Format Thin Provisioning Pool (Unformatted Area)		NG	OK	OK	NG	NG	OK
Set Deduplication/Compression		NG	OK	OK	NG	NG	OK
Modify Threshold Thin Provisioning Pool		NG	OK	OK	NG	NG	OK
Modify Cache Parameters (TPP)		NG	OK	OK	NG	NG	OK
Assign Eco-mode Schedule (Thin Provisioning Pool)		NG	OK	OK	NG	NG	OK
Start Balancing Flexible Tier Pool (*2)	Volume - Create / Modify	NG	OK	OK	NG	NG	OK
Stop Balancing Flexible Tier Pool (*2)	Volume - Create / Modify	NG	OK	OK	NG	NG	OK

*1	:	When this function is used, one of the following policies is also required to display the status screen: "Status Display", "RAID Group Management", "Volume - Create / Modify", or "Volume - Delete / Format".
*2	:	When this function is used, one of the following policies is also required to display the status screen: "Status Display", "RAID Group Management", or "Volume - Delete / Format".

Advanced Copy Management (Display)

Function		Required policy for this function	Availability of executions in the default role
Function		Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Advanced Copy (Basic Information)		One of the following policies is required: Status Display Advanced Copy Management Copy Session Management Storage Management	OK	OK	OK	NG	OK	OK
Advanced Copy (All Local Sessions)		One of the following policies is required: Status Display Copy Session Management	OK	OK	OK	NG	OK	OK
	EC		OK	OK	OK	NG	OK	OK
	OPC		OK	OK	OK	NG	OK	OK
	QuickOPC		OK	OK	OK	NG	OK	OK
	SnapOPC		OK	OK	OK	NG	OK	OK
	SnapOPC+		OK	OK	OK	NG	OK	OK
	Monitor		OK	OK	OK	NG	OK	OK
Advanced Copy (All Remote Sessions)			OK	OK	OK	NG	OK	OK
	REC		OK	OK	OK	NG	OK	OK
ODX Sessions			OK	OK	OK	NG	OK	OK
XCOPY Sessions			OK	OK	OK	NG	OK	OK
Virtual Volume Sessions			OK	OK	OK	NG	OK	OK
Settings (Advanced Copy)		One of the following policies is required: Status Display Advanced Copy Management Copy Session Management Storage Management (*1)	OK	OK	OK	NG	OK	OK
	Snap Data Pool	One of the following policies is required: Status Display Advanced Copy Management	OK	OK	OK	NG	OK	OK
	Copy Path		OK	OK	OK	NG	OK	OK
	REC Buffer		OK	OK	OK	NG	OK	OK
	REC Disk Buffer		OK	OK	OK	NG	OK	OK

When displaying the set state for the Advanced Copy license, the "Storage Management" policy is also required.

Advanced Copy Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Start SnapOPC+	Copy Session Management	NG	OK	OK	NG	NG	OK
Stop Copy Session	Copy Session Management	NG	OK	OK	NG	NG	OK
Register Advanced Copy License	Storage Management	NG	OK	NG	NG	NG	OK
Delete Advanced Copy License		NG	OK	NG	NG	NG	OK
Register Veeam Storage Integration License		NG	OK	NG	NG	NG	OK
Delete Veeam Storage Integration License		NG	OK	NG	NG	NG	OK
Register License		NG	OK	NG	NG	NG	OK
Modify EC/OPC Priority	Advanced Copy Management	NG	OK	OK	NG	NG	OK
Modify Copy Table Size		NG	OK	OK	NG	NG	OK
Modify Copy Parameters		NG	OK	OK	NG	NG	OK
Export Storage Information		NG	OK	OK	NG	NG	OK
Set Copy Path		NG	OK	OK	NG	NG	OK
Delete All Copy Path		NG	OK	OK	NG	NG	OK
Export All Copy Path		NG	OK	OK	NG	NG	OK
Measure Round Trip Time		NG	OK	OK	NG	NG	OK
Modify REC Buffer		NG	OK	OK	NG	NG	OK
Create REC Disk Buffer		NG	OK	OK	NG	NG	OK
Assign REC Disk Buffer		NG	OK	OK	NG	NG	OK
Delete REC Disk Buffer		NG	OK	OK	NG	NG	OK
Format REC Disk Buffer		NG	OK	OK	NG	NG	OK
Modify REC Multiplicity		NG	OK	OK	NG	NG	OK
Set REC Bandwidth Limit		NG	OK	OK	NG	NG	OK
Set REC Line Speed		NG	OK	OK	NG	NG	OK
Enable ODX (*1)	One of the following policies is required: Volume - Create / Modify Volume - Delete / Format Advanced Copy Management	NG	OK	OK	NG	NG	OK
Disable ODX (*1)		NG	OK	OK	NG	NG	OK
Create ODX Buffer Volume (*1)		NG	OK	OK	NG	NG	OK

When this function is used with the "Volume - Create / Modify" or "Volume - Delete / Format" policy, one of the following policies is also required to display the status screen: "Status Display", "Advanced Copy Management", "Copy Session Management", or "Storage Management".

Connectivity Management (Display)

Function			Required policy for this function	Availability of executions in the default role
Function			Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Connectivity (Basic Information)			One of the following policies is required: Status Display Host Interface Management	OK	OK	OK	NG	OK	OK
Host Group				OK	OK	OK	NG	OK	OK
	FC Host			OK	OK	OK	NG	OK	OK
	iSCSI Host			OK	OK	OK	NG	OK	OK
	SAS Host			OK	OK	OK	NG	OK	OK
CA Port Group				OK	OK	OK	NG	OK	OK
	FC Port			OK	OK	OK	NG	OK	OK
	iSCSI Port			OK	OK	OK	NG	OK	OK
	SAS Port			OK	OK	OK	NG	OK	OK
LUN Group				OK	OK	OK	NG	OK	OK
Host Response				OK	OK	OK	NG	OK	OK
CA Reset Group				OK	OK	OK	NG	OK	OK
Host-LU QoS			Host Interface Management	NG	OK	OK	NG	NG	OK
	Host QoS (Basic)			NG	OK	OK	NG	NG	OK
		FC Host QoS		NG	OK	OK	NG	NG	OK
		iSCSI Host QoS		NG	OK	OK	NG	NG	OK
		SAS Host QoS		NG	OK	OK	NG	NG	OK
	Port QoS (Basic)			NG	OK	OK	NG	NG	OK
		FC Port QoS		NG	OK	OK	NG	NG	OK
		iSCSI Port QoS		NG	OK	OK	NG	NG	OK
		SAS Port QoS		NG	OK	OK	NG	NG	OK
	LU QoS Group			NG	OK	OK	NG	NG	OK
NAS			Status Display	OK	OK	OK	NG	OK	OK
	NAS Interface		Status Display	OK	OK	OK	NG	OK	OK
	Environment Settings		One of the following policies is required: Status Display NAS Management	OK	OK	OK	NG	OK	OK
	Quota Management			OK	OK	OK	NG	OK	OK
	Meta Cache Distribution			OK	OK	OK	NG	OK	OK

Connectivity Management (Action)

Host Affinity Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create Host Affinity	Host Interface Management	NG	OK	OK	NG	NG	OK
Delete Host Affinity		NG	OK	OK	NG	NG	OK
Modify Host Affinity		NG	OK	OK	NG	NG	OK

Host Group Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Add FC Host Group	Host Interface Management	NG	OK	OK	NG	NG	OK
Add iSCSI Host Group		NG	OK	OK	NG	NG	OK
Add SAS Host Group		NG	OK	OK	NG	NG	OK
Delete Host Group		NG	OK	OK	NG	NG	OK
Modify Host Group		NG	OK	OK	NG	NG	OK
Add FC Host		NG	OK	OK	NG	NG	OK
Add iSCSI Host		NG	OK	OK	NG	NG	OK
Add SAS Host		NG	OK	OK	NG	NG	OK
Delete FC Host		NG	OK	OK	NG	NG	OK
Delete iSCSI Host		NG	OK	OK	NG	NG	OK
Delete SAS Host		NG	OK	OK	NG	NG	OK
Modify FC Host		NG	OK	OK	NG	NG	OK
Modify iSCSI Host		NG	OK	OK	NG	NG	OK
Modify SAS Host		NG	OK	OK	NG	NG	OK

CA Port Group Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create FC Port Group	Host Interface Management	NG	OK	OK	NG	NG	OK
Create iSCSI Port Group		NG	OK	OK	NG	NG	OK
Create SAS Port Group		NG	OK	OK	NG	NG	OK
Delete CA Port Group		NG	OK	OK	NG	NG	OK
Modify CA Port Group		NG	OK	OK	NG	NG	OK
Modify FC Port Parameters		NG	OK	OK	NG	NG	OK
Modify iSCSI Port Parameters		NG	OK	OK	NG	NG	OK
Modify SAS Port Parameters		NG	OK	OK	NG	NG	OK
Modify Port Mode		NG	OK	OK	NG	NG	OK

LUN Group Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Add LUN Group	Host Interface Management	NG	OK	OK	NG	NG	OK
Delete LUN Group		NG	OK	OK	NG	NG	OK
Modify LUN Group		NG	OK	OK	NG	NG	OK

Host Response Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Add Host Response	Host Interface Management	NG	OK	OK	NG	NG	OK
Delete Host Response		NG	OK	OK	NG	NG	OK
Modify Host Response		NG	OK	OK	NG	NG	OK

Modify CA Reset Group

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Modify CA Reset Group	Host Interface Management	NG	OK	OK	NG	NG	OK

Host-LU QoS Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Enable/Disable QoS	Host Interface Management	NG	OK	OK	NG	NG	OK
Initialize QoS	One of the following policies is required: Volume - Create / Modify Host Interface Management	NG	OK	OK	NG	NG	OK
Set Host-LU QoS	Host Interface Management	NG	OK	OK	NG	NG	OK
Release Host-LU QoS		NG	OK	OK	NG	NG	OK
Start Host-LU QoS Performance Monitoring		NG	OK	OK	NG	NG	OK
Stop Host-LU QoS Performance Monitoring		NG	OK	OK	NG	NG	OK
Set Host QoS Pattern		NG	OK	OK	NG	NG	OK
Set Port QoS Pattern		NG	OK	OK	NG	NG	OK
Set LU QoS Pattern		NG	OK	OK	NG	NG	OK
Set FC Host QoS		NG	OK	OK	NG	NG	OK
Set iSCSI Host QoS		NG	OK	OK	NG	NG	OK
Set SAS Host QoS		NG	OK	OK	NG	NG	OK
Set FC Port QoS		NG	OK	OK	NG	NG	OK
Set iSCSI Port QoS		NG	OK	OK	NG	NG	OK
Set SAS Port QoS		NG	OK	OK	NG	NG	OK
Add LU QoS Group		NG	OK	OK	NG	NG	OK
Delete LU QoS Group		NG	OK	OK	NG	NG	OK
Modify LU QoS Group		NG	OK	OK	NG	NG	OK

NAS Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create Shared Folder	NAS Management	NG	OK	OK	NG	NG	OK
Delete Shared Folder		NG	OK	OK	NG	NG	OK
Modify Shared Folder		NG	OK	OK	NG	NG	OK
Clear NAS Data		NG	OK	OK	NG	NG	OK
Create NAS Interface		NG	OK	OK	NG	NG	OK
Delete NAS Interface		NG	OK	OK	NG	NG	OK
Modify NAS Interface		NG	OK	OK	NG	NG	OK
Change NAS Server Name		NG	OK	OK	NG	NG	OK
Set DNS Server		NG	OK	OK	NG	NG	OK
Set Authentication Server		NG	OK	OK	NG	NG	OK
Add Local User		NG	OK	OK	NG	NG	OK
Delete Local User		NG	OK	OK	NG	NG	OK
Modify Local User		NG	OK	OK	NG	NG	OK
Add Local Group		NG	OK	OK	NG	NG	OK
Delete Local Group		NG	OK	OK	NG	NG	OK
Add Quota Setting		NG	OK	OK	NG	NG	OK
Delete Quota Setting		NG	OK	OK	NG	NG	OK
Modify Quota Setting		NG	OK	OK	NG	NG	OK
Initialize Meta Cache Distribution		NG	OK	OK	NG	NG	OK
Enable Automatic Meta Cache Distribution		NG	OK	OK	NG	NG	OK
Disable Automatic Meta Cache Distribution		NG	OK	OK	NG	NG	OK

Component Management (Display)

Function			Required policy for this function	Availability of executions in the default role
Function			Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Storage (Basic Information)			One of the following policies is required: Status Display Maintenance Operation	OK	OK	OK	NG	OK	OK
Controller Enclosure				OK	OK	OK	NG	OK	OK
	Controller Module			OK	OK	OK	NG	OK	OK
		Performance (CM)		OK	OK	OK	NG	OK	OK
	Channel Adapter			OK	OK	OK	NG	OK	OK
		Performance (CA)		OK	OK	OK	NG	OK	OK
	Login Host			OK	OK	OK	NG	OK	OK
	PCIe Flash Module		Status Display	OK	OK	OK	NG	OK	OK
	Performance (PCIe Flash Module)		Status Display	OK	OK	OK	NG	OK	OK
	Bootup and Utility Device		One of the following policies is required: Status Display Maintenance Operation	OK	OK	OK	NG	OK	OK
	Power Supply Unit (CE)			OK	OK	OK	NG	OK	OK
	Battery (BBU) (*1)			OK	OK	OK	NG	OK	OK
	Battery (BTU/BCU) (*2)			OK	OK	OK	NG	OK	OK
Frontend Enclosure				OK	OK	OK	NG	OK	OK
	Frontend Router			OK	OK	OK	NG	OK	OK
	Service Controller			OK	OK	OK	NG	OK	OK
	Power Supply Unit (FE)			OK	OK	OK	NG	OK	OK
	FAN Unit			OK	OK	OK	NG	OK	OK
	Operation Panel			OK	OK	OK	NG	OK	OK
Drive Enclosure				OK	OK	OK	NG	OK	OK
	I/O Module			OK	OK	OK	NG	OK	OK
		Port Error Statistics	Maintenance Information	NG	OK	NG	NG	OK	OK
	Power Supply Unit (DE)		One of the following policies is required: Status Display Maintenance Operation	NG	OK	NG	NG	OK	OK
Fan Expander Module				OK	OK	OK	NG	OK	OK
Drives			One of the following policies is required: Status Display RAID Group Management Maintenance Operation	OK	OK	OK	NG	OK	OK
	Performance (Drives)		One of the following policies is required: Status Display Maintenance Information	OK	OK	OK	NG	OK	OK
	Drive Error Statistics		Maintenance Information	NG	OK	NG	NG	OK	OK

*1	:	This item is displayed for the ETERNUS DX60 S5/DX100 S5/DX200 S5 and the ETERNUS AF150 S3/AF250 S3.
*2	:	This item is displayed for the ETERNUS DX500 S5/DX600 S5/DX900 S5, the ETERNUS DX8100 S4/DX8900 S4, and the ETERNUS AF650 S3.

Component Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Turn on Locator Beacon/Turn off Locator Beacon	Status Display	OK	OK	OK	NG	OK	OK
Model Upgrade	Maintenance Operation	NG	NG	NG	NG	NG	OK
Hot Preventive Maintenance	Maintenance Operation	NG	NG	NG	NG	NG	OK
Assign Global Hot Spare	RAID Group Management	NG	OK	OK	NG	NG	OK
Release Global Hot Spare		NG	OK	OK	NG	NG	OK
Assign Dedicated Hot Spare		NG	OK	OK	NG	NG	OK
Release Dedicated Hot Spare		NG	OK	OK	NG	NG	OK
Force Enable Module	One of the following policies is required: Storage Management (*1) Maintenance Operation	NG	OK	NG	NG	NG	OK
Force Disable Module	Maintenance Operation	NG	NG	NG	NG	NG	OK
Sanitize Drive	Maintenance Operation	NG	NG	NG	NG	NG	OK
Recover NAS System Volume	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Add Controller Enclosure	Maintenance Operation	NG	NG	NG	NG	NG	OK
Add Controller Module		NG	NG	NG	NG	NG	OK
Add Memory		NG	NG	NG	NG	NG	OK
Add Channel Adapter		NG	NG	NG	NG	NG	OK
Add Channel Adapter Port (*2)	One of the following policies is required: Storage Management Maintenance Operation	NG	NG	NG	NG	NG	OK
Add PCIe Flash Module	Maintenance Operation	NG	NG	NG	NG	NG	OK
Remove PCIe Flash Module	Maintenance Operation	NG	NG	NG	NG	NG	OK
Add Drive Enclosure	One of the following policies is required: Storage Management (*3) Maintenance Operation	NG	OK	NG	NG	NG	OK
Remove Disk Drive	Maintenance Operation	NG	NG	NG	NG	NG	OK
Remove Channel Adapter		NG	NG	NG	NG	NG	OK
Remove Drive Enclosure		NG	NG	NG	NG	NG	OK
Export Performance Information	One of the following policies is required: Status Display Maintenance Operation	OK	OK	OK	NG	OK	OK
Start Disk Diagnosis	Maintenance Operation	NG	NG	NG	NG	NG	OK
Clear Drive Error Statistics (All Drives)	Maintenance Information	NG	OK	NG	NG	OK	OK
Clear Drive Error Statistics (Selected Drives)	Maintenance Information	NG	OK	NG	NG	OK	OK

*1	:	If the user has "Storage Management" policy, the NAS Engine can only be enabled by force.
*2	:	This function is available for the ETERNUS DX60 S5/DX100 S5.
*3	:	This function is available for the ETERNUS DX60 S5/DX100 S5/DX200 S5 and the ETERNUS AF150 S3/AF250 S3.

System Management (Display)

Function		Required policy for this function	Availability of executions in the default role
Function		Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
System (Basic Information)		One of the following policies is required: Status Display Storage Management User Management Authentication / Role Security Setting Maintenance Information Firmware Management Maintenance Operation	OK	OK	OK	OK	OK	OK
Network		One of the following policies is required: Status Display Storage Management	OK	OK	OK	NG	OK	OK
Remote Support (REMCS)		One of the following policies is required: Status Display Storage Management Maintenance Operation	OK	OK	OK	NG	OK	OK
Remote Support (AIS Connect) (*1)			OK	OK	OK	NG	OK	OK
	Root Certificate	Status Display	OK	OK	OK	NG	OK	OK
Key Management			OK	OK	OK	NG	OK	OK
	Key Group		OK	OK	OK	NG	OK	OK
Define Role		One of the following policies is required: User Management Authentication / Role	NG	OK	NG	OK	NG	NG
Eco-mode		One of the following policies is required: Status Display RAID Group Management Maintenance Operation	OK	OK	OK	NG	OK	OK
Event/Dump		One of the following policies is required: Status Display Storage Management Maintenance Information Maintenance Operation	OK	OK	OK	NG	OK	OK
Audit Log		Security Setting	NG	OK	NG	NG	OK	NG
Firmware Maintenance		One of the following policies is required: Firmware Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Storage Migration		One of the following policies is required: Status Display Storage Migration Management	OK	OK	OK	NG	OK	OK
External Drives		One of the following policies is required: Status Display RAID Group Management	OK	OK	OK	NG	OK	OK
Extreme Cache		One of the following policies is required: Status Display Storage Management	OK	OK	OK	NG	OK	OK
Extreme Cache Pool			OK	OK	OK	NG	OK	OK
Utility		One of the following policies is required: Storage Management Maintenance Information Maintenance Operation	NG	OK	NG	NG	OK	OK
System Settings		One of the following policies is required: Status Display Advanced Copy Management Storage Management Security Setting Maintenance Operation	OK	OK	OK	NG	OK	OK

AIS Connect will be EOLed on December 2022.

System Management (Action)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Initial Setup	One of the following policies is required: Storage Management Security Setting	NG	OK	NG	NG	OK	OK
Smart Setup Wizard		NG	OK	NG	NG	OK	OK
Start/End Maintenance	Maintenance Operation	NG	NG	NG	NG	NG	OK
Register Unified Storage License	Maintenance Operation	NG	NG	NG	NG	NG	OK
Change User Password	One of the following policies is required: Status Display Storage Management User Management Authentication / Role Security Setting Maintenance Information Maintenance Operation	OK	OK	OK	OK	OK	OK
Set SSH Public Key		OK	OK	OK	OK	OK	OK
Expand System Memory Capacity	Maintenance Operation	NG	NG	NG	NG	NG	OK
Set Deduplication/Compression Mode	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Enable RESTful API	Storage Management	NG	OK	NG	NG	NG	NG
Register Non-disruptive Storage Migration License	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Delete Non-disruptive Storage Migration License		NG	OK	NG	NG	NG	OK

System Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Modify Storage System Name	Storage Management	NG	OK	NG	NG	NG	OK
Modify Date and Time	Storage Management	NG	OK	NG	NG	NG	OK
Change Box ID	Advanced Copy Management	NG	OK	OK	NG	NG	OK
Setup Subsystem Parameters	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Setup Encryption Mode	Security Setting	NG	OK	NG	NG	OK	NG
Setup SMI-S Environment	Storage Management	NG	OK	NG	NG	NG	OK
Register SED Authentication Key	Security Setting	NG	OK	NG	NG	OK	NG
Setup Power Management	Storage Management	NG	OK	NG	NG	NG	OK
Setup Exclusive Read Cache	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Setup Disk Drive Patrol	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Setup Debug Mode		NG	OK	NG	NG	NG	OK
Modify Disk Performance Monitor	Maintenance Operation	NG	NG	NG	NG	NG	OK

Extreme Cache Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup Extreme Cache	Storage Management	NG	OK	NG	NG	NG	OK
Release Extreme Cache	Storage Management	NG	OK	NG	NG	NG	OK

Extreme Cache Pool Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup Extreme Cache Pool	Storage Management	NG	OK	NG	NG	NG	OK
Release Extreme Cache Pool	Storage Management	NG	OK	NG	NG	NG	OK

Utility Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Reset Backup/Restore Fail	Maintenance Operation	NG	NG	NG	NG	NG	OK
Reset Machine Down Recovery Fail		NG	NG	NG	NG	NG	OK
Force Write Back		NG	NG	NG	NG	NG	OK
Clear Sense Data		NG	NG	NG	NG	NG	OK
Initialize BUD		NG	NG	NG	NG	NG	OK
Force Restore		NG	NG	NG	NG	NG	OK
Force Restore Thin Provisioning		NG	NG	NG	NG	NG	OK
Change Master CM		NG	NG	NG	NG	NG	OK
Reboot All CMs		NG	NG	NG	NG	NG	OK
Shutdown/Restart Storage System	Storage Management	NG	OK	NG	NG	NG	OK
Apply Configuration	Maintenance Operation	NG	NG	NG	NG	NG	OK
Cancel Applying Configuration	Maintenance Operation	NG	NG	NG	NG	NG	OK
Backup Configuration	Maintenance Information	NG	OK	NG	NG	OK	OK
Export Configuration	Maintenance Information	NG	OK	NG	NG	OK	OK
Setup Drive Monitor Parameters	Maintenance Operation	NG	NG	NG	NG	NG	OK
Export Drive Monitor Parameters	Maintenance Operation	NG	NG	NG	NG	NG	OK
Start/Stop Performance Monitoring	Storage Management	NG	OK	NG	NG	NG	OK
Clear Cache	Storage Management	NG	OK	NG	NG	NG	OK

Eco-mode Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Modify Eco-mode General Setting	One of the following policies is required: RAID Group Management Maintenance Operation	NG	OK	OK	NG	NG	OK
Create Eco-mode Schedule	RAID Group Management	NG	OK	OK	NG	NG	OK
Delete Eco-mode Schedule		NG	OK	OK	NG	NG	OK
Modify Eco-mode Schedule		NG	OK	OK	NG	NG	OK

User Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup User Account	User Management	NG	OK	NG	OK	NG	NG
Initialize User Account		NG	OK	NG	OK	NG	NG
Modify User Policy		NG	OK	NG	OK	NG	NG
Modify RADIUS	Authentication / Role	NG	OK	NG	OK	NG	NG
Add Role		NG	OK	NG	OK	NG	NG
Delete Role		NG	OK	NG	OK	NG	NG
Modify Role		NG	OK	NG	OK	NG	NG

Network Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup Network Environment	Storage Management	NG	OK	NG	NG	NG	OK
Setup Firewall		NG	OK	NG	NG	NG	OK
Setup SNMP Agent Basic Interface		NG	OK	NG	NG	NG	OK
Setup SNMP Manager		NG	OK	NG	NG	NG	OK
Setup SNMP Agent MIB Access View		NG	OK	NG	NG	NG	OK
Setup SNMP Agent User		NG	OK	NG	NG	NG	OK
Setup SNMP Agent Community		NG	OK	NG	NG	NG	OK
Setup SNMP Agent Trap		NG	OK	NG	NG	NG	OK
Download MIB File		NG	OK	NG	NG	NG	OK
Send SNMP Trap Test		NG	OK	NG	NG	NG	OK
Display SMTP Log		NG	OK	NG	NG	NG	OK
Setup E-Mail Notification		NG	OK	NG	NG	NG	OK
Setup Syslog		NG	OK	NG	NG	NG	OK
Setup SSH Server Key		NG	OK	NG	NG	NG	OK
Create Self-signed SSL Certificate		NG	OK	NG	NG	NG	OK
Create Key/CSR		NG	OK	NG	NG	NG	OK
Register SSL Certificate		NG	OK	NG	NG	NG	OK
Setup SSL Security Configuration	One of the following policies is required: Storage Management Security Setting (*1)	NG	OK	NG	NG	OK	OK

When this function is used with the "Security Setting" policy, the "Status Display" policy or the "Storage Management" policy is also required to display the status screen.

Event/Dump Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup Event Notification	Storage Management	NG	OK	NG	NG	NG	OK
Display/Delete Event Log	Maintenance Information	NG	OK	NG	NG	OK	OK
Export/Delete Log (*1)		NG	OK	NG	NG	OK	OK
Export/Delete Panic Dump (*2)		NG	OK	NG	NG	OK	OK

*1	:	The "Maintenance Operation" policy is also required to delete logs.
*2	:	The "Maintenance Operation" policy is also required to delete panic dumps.

Audit Log Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Enable Audit Log	Security Setting	NG	OK	NG	NG	OK	NG
Disable Audit Log		NG	OK	NG	NG	OK	NG
Setup Audit Log		NG	OK	NG	NG	OK	NG

Key Management (*1)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup Key Management Machine Name	Security Setting	NG	OK	NG	NG	OK	NG
Add Key Server		NG	OK	NG	NG	OK	NG
Delete Key Server		NG	OK	NG	NG	OK	NG
Modify Key Server		NG	OK	NG	NG	OK	NG
Create Key Group		NG	OK	NG	NG	OK	NG
Delete Key Group		NG	OK	NG	NG	OK	NG
Modify Key Group		NG	OK	NG	NG	OK	NG
Update SED Authentication Key		NG	OK	NG	NG	OK	NG
Import SSL/KMIP Certificate		NG	OK	NG	NG	OK	NG

When the key management functions are used, the "Status Display" policy is also required to display the status screen.

Storage Migration Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Start Storage Migration	Storage Migration Management	NG	OK	OK	NG	NG	OK
Download Template File for Storage Migration Settings		NG	OK	OK	NG	NG	OK
Delete Storage Migration Path		NG	OK	OK	NG	NG	OK
Download Storage Migration Result		NG	OK	OK	NG	NG	OK
Restart Storage Migration		NG	OK	OK	NG	NG	OK
Suspend Storage Migration		NG	OK	OK	NG	NG	OK
Stop Storage Migration		NG	OK	OK	NG	NG	OK

External Drive Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Create External Drive	RAID Group Management	NG	OK	OK	NG	NG	OK
Delete External Drive	RAID Group Management	NG	OK	OK	NG	NG	OK

Remote Support Management (REMCS)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Display Communication Log	Storage Management	NG	OK	NG	NG	NG	OK
Setup Remote Support		NG	OK	NG	NG	NG	OK
Update Customer Information		NG	OK	NG	NG	NG	OK
Update Communication Environment Information		NG	OK	NG	NG	NG	OK
Setup Log Sending Parameters		NG	OK	NG	NG	NG	OK
Stop/Restart Remote Support		NG	OK	NG	NG	NG	OK

Remote Support Management (AIS Connect) (*1)

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Setup AIS Connect Environment	One of the following policies is required: Storage Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Setup Remote Session Permission		NG	OK	NG	NG	NG	OK
Send Log		NG	OK	NG	NG	NG	OK
Test Server Connectivity		NG	OK	NG	NG	NG	OK
Send AIS Connect Test Event		NG	OK	NG	NG	NG	OK
Customer Information Setup		NG	OK	NG	NG	NG	OK
Import Root Certificate (*2)	Storage Management	NG	OK	NG	NG	NG	OK

*1	:	AIS Connect will be EOLed on December 2022.
*2	:	When this function is used, the "Status Display" policy is also required to display the status screen.

Firmware Management

Function	Required policy for this function	Availability of executions in the default role
Function	Required policy for this function	Monitor	Admin	Storage Admin	Account Admin	Security Admin	Maintainer
Apply Controller Firmware	One of the following policies is required: Firmware Management Maintenance Operation	NG	OK	NG	NG	NG	OK
Delete Controller Firmware Schedule		NG	OK	NG	NG	NG	OK
Delete Controller Firmware	Maintenance Operation	NG	NG	NG	NG	NG	OK
Register Disk Firmware		NG	NG	NG	NG	NG	OK
Apply Disk Firmware		NG	NG	NG	NG	NG	OK
Delete Disk Firmware		NG	NG	NG	NG	NG	OK

OK: Available NG: Not available