User Roles and Policies

This appendix describes user roles and policies.

Roles

When creating a user account, at least one role must be applied.

There are two types of roles: a default role and a custom role. The default role is already prepared in the storage system and the custom role can be managed by the user.

Default role

Use the default roles for normal operation. Default roles cannot be deleted. The default role settings cannot be changed.

The following shows the default roles and policies that are applied to each default role.

Policies

Default roles

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Software (*1)

Status Display

OK

OK

OK

N/A

OK

OK

N/A

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

N/A

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

N/A

Volume - Delete / Format

N/A

OK

OK

N/A

N/A

OK

N/A

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

N/A

Advanced Copy Management

N/A

OK

OK

N/A

N/A

OK

N/A

Copy Session Management

N/A

OK

OK

N/A

N/A

OK

N/A

Storage Migration Management

N/A

OK

OK

N/A

N/A

OK

N/A

Storage Management

N/A

OK

N/A

N/A

N/A

OK

N/A

User Management

N/A

OK

N/A

OK

N/A

N/A

N/A

Authentication / Role

N/A

OK

N/A

OK

N/A

N/A

N/A

Security Setting

N/A

OK

N/A

N/A

OK

N/A

N/A

Maintenance Information

N/A

OK

N/A

N/A

OK

OK

N/A

Firmware Management

N/A

OK

N/A

N/A

N/A

OK

N/A

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

N/A

OK: Available    N/A: Not available

*1  :  "Software" is the role that is used for external software. A user account with the "Software" role cannot log in to Web GUI.

Custom role

Create custom roles when the operating environment cannot be configured by default roles.

Custom roles have unique names that do not match the existing roles. Policies are applied for custom roles.

Multiple policies can be applied to one custom role.

Refer to the following for the procedure on setting custom roles.

  • Add Role

    This function creates custom roles.

  • Delete Role

    This function deletes custom roles.

  • Modify Role

    This function changes custom role settings.

Availability of Functions for Each Policy

Functions that can be used vary depending on the policy.

The available functions for each policy are described below.

"Software" is the default role that is used for external software. A user account with the "Software" role cannot log in to Web GUI. Therefore, "Software" is omitted in the following tables.

Overview (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Login

Any policy

OK

OK

OK

OK

OK

OK

Logout

OK

OK

OK

OK

OK

OK

Overview

OK

OK

OK

OK

OK

OK

Volume Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Volume (Basic Information)

One of the following policies is required:

  • Status Display

  • Volume - Create / Modify

  • Volume - Delete / Format

  • Host Interface Management

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Performance (Host I/O)

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Performance (QoS)

One of the following policies is required:

  • Status Display

  • Volume - Create / Modify

OK

OK

OK

N/A

OK

OK

Performance (Advanced Copy)

Status Display

OK

OK

OK

N/A

OK

OK

LUN Group

One of the following policies is required:

  • Status Display

  • Host Interface Management

OK

OK

OK

N/A

OK

OK

Reservation

OK

OK

OK

N/A

OK

OK

Pinned Data

One of the following policies is required:

  • Status Display

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Bad Sector

OK

OK

OK

N/A

OK

OK

Balancing Thin Provisioning Volume

One of the following policies is required:

  • Status Display

  • Volume - Create / Modify

OK

OK

OK

N/A

OK

OK

Volume Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create Volume

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Delete Volume

Volume - Delete / Format

N/A

OK

OK

N/A

N/A

OK

Rename Volume

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Format Volume

Volume - Delete / Format

N/A

OK

OK

N/A

N/A

OK

Expand Volume

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Encrypt Volume

N/A

OK

OK

N/A

N/A

OK

Expand Thin Provisioning Volume

N/A

OK

OK

N/A

N/A

OK

Modify Thin Provisioning Volume Threshold

N/A

OK

OK

N/A

N/A

OK

Optimize TPV/FTV Capacity

N/A

OK

OK

N/A

N/A

OK

Cancel Optimizing TPV/FTV Capacity

N/A

OK

OK

N/A

N/A

OK

Start Balancing Thin Provisioning Volume

N/A

OK

OK

N/A

N/A

OK

Stop Balancing Thin Provisioning Volume

N/A

OK

OK

N/A

N/A

OK

Set Allocation

N/A

OK

OK

N/A

N/A

OK

Delete Snap Data Pool Volume

Volume - Delete / Format

N/A

OK

OK

N/A

N/A

OK

Force Delete Snap Data Pool Volume

N/A

OK

OK

N/A

N/A

OK

Initialize Snap Data Volume

N/A

OK

OK

N/A

N/A

OK

Start RAID Migration (*1)

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Stop RAID Migration

N/A

OK

OK

N/A

N/A

OK

Stop External Volume Data Synchronization

N/A

OK

OK

N/A

N/A

OK

Forbid Advanced Copy

N/A

OK

OK

N/A

N/A

OK

Permit Advanced Copy

N/A

OK

OK

N/A

N/A

OK

Release Reservation

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Pinned Data

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Destage Pinned Data

N/A

N/A

N/A

N/A

N/A

OK

Delete Pinned Data

N/A

N/A

N/A

N/A

N/A

OK

Export Pinned Data

N/A

N/A

N/A

N/A

N/A

OK

Data Container Volume Diagnosis

N/A

N/A

N/A

N/A

N/A

OK

Modify Cache Parameters

One of the following policies is required:

  • Volume - Create / Modify

  • Maintenance Operation

N/A

OK

OK

N/A

N/A

OK

Export Cache Parameters

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Export Performance Information

Status Display

OK

OK

OK

N/A

OK

OK

Set ALUA (*2)

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Set Volume QoS

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Set Volume QoS Pattern

N/A

OK

OK

N/A

N/A

OK

Delete External LU Information

N/A

OK

OK

N/A

N/A

OK

Change Data Reduction Processing CM

N/A

OK

OK

N/A

N/A

OK
*1  :  To execute a RAID migration from an encrypted volume to an unencrypted volume, the "Security Setting" policy is required.
*2  :  When this function is used, the "Volume - Create / Modify" or "Maintenance Operation" policy is also required to display the status screen.

RAID Group Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

RAID Group (Basic Information)

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Volume - Create / Modify

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Tuning

One of the following policies is required:

  • Status Display

  • RAID Group Management

OK

OK

OK

N/A

OK

OK

Eco-mode Schedule (RAID Group)

OK

OK

OK

N/A

OK

OK

External RAID Group

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

RAID Group Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create RAID Group

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Delete RAID Group

N/A

OK

OK

N/A

N/A

OK

Rename RAID Group

N/A

OK

OK

N/A

N/A

OK

Change Controlling CM

N/A

OK

OK

N/A

N/A

OK

Expand RAID Group

N/A

OK

OK

N/A

N/A

OK

Modify RAID Group Parameters

N/A

OK

OK

N/A

N/A

OK

Assign Eco-mode Schedule (RAID Group)

N/A

OK

OK

N/A

N/A

OK

External RAID Group Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create External RAID Group

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Delete External RAID Group

N/A

OK

OK

N/A

N/A

OK

Recover External RAID Group

N/A

OK

OK

N/A

N/A

OK

Thin Provisioning Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Thin Provisioning Pool (Basic Information)

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Volume - Create / Modify

  • Volume - Delete / Format

OK

OK

OK

N/A

OK

OK

Threshold (Thin Provisioning Pool)

One of the following policies is required:

  • Status Display

  • RAID Group Management

OK

OK

OK

N/A

OK

OK

Eco-mode Schedule (Thin Provisioning Pool)

OK

OK

OK

N/A

OK

OK

Flexible Tier Pool (Basic Information)

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Volume - Delete / Format

OK

OK

OK

N/A

OK

OK

Settings (Thin Provisioning)

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Thin Provisioning Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Set Thin Provisioning (*1)

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Create Thin Provisioning Pool

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Delete Thin Provisioning Pool

N/A

OK

OK

N/A

N/A

OK

Rename Thin Provisioning Pool

N/A

OK

OK

N/A

N/A

OK

Expand Thin Provisioning Pool

N/A

OK

OK

N/A

N/A

OK

Format Thin Provisioning Pool (All Area)

N/A

OK

OK

N/A

N/A

OK

Format Thin Provisioning Pool (Unformatted Area)

N/A

OK

OK

N/A

N/A

OK

Set Deduplication/Compression

N/A

OK

OK

N/A

N/A

OK

Modify Threshold Thin Provisioning Pool

N/A

OK

OK

N/A

N/A

OK

Modify Cache Parameters (TPP)

N/A

OK

OK

N/A

N/A

OK

Assign Eco-mode Schedule (Thin Provisioning Pool)

N/A

OK

OK

N/A

N/A

OK

Start Balancing Flexible Tier Pool (*2)

Volume - Create / Modify

N/A

OK

OK

N/A

N/A

OK

Stop Balancing Flexible Tier Pool (*2)

N/A

OK

OK

N/A

N/A

OK
*1  :  When this function is used, one of the following policies is also required to display the status screen: "Status Display", "RAID Group Management", "Volume - Create / Modify", or "Volume - Delete / Format".
*2  :  When this function is used, one of the following policies is also required to display the status screen: "Status Display", "RAID Group Management", or "Volume - Delete / Format".

Advanced Copy Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Advanced Copy (Basic Information)

One of the following policies is required:

  • Status Display

  • Advanced Copy Management

  • Copy Session Management

  • Storage Management

OK

OK

OK

N/A

OK

OK

Advanced Copy (All Local Sessions)

One of the following policies is required:

  • Status Display

  • Copy Session Management

OK

OK

OK

N/A

OK

OK
 

EC

OK

OK

OK

N/A

OK

OK

OPC

OK

OK

OK

N/A

OK

OK

QuickOPC

OK

OK

OK

N/A

OK

OK

SnapOPC

OK

OK

OK

N/A

OK

OK

SnapOPC+

OK

OK

OK

N/A

OK

OK

Monitor

OK

OK

OK

N/A

OK

OK

Advanced Copy (All Remote Sessions)

OK

OK

OK

N/A

OK

OK
  REC

OK

OK

OK

N/A

OK

OK

ODX Sessions

OK

OK

OK

N/A

OK

OK

XCOPY Sessions

OK

OK

OK

N/A

OK

OK

Virtual Volume Sessions

OK

OK

OK

N/A

OK

OK

Settings (Advanced Copy)

One of the following policies is required:

  • Status Display

  • Advanced Copy Management

  • Copy Session Management

  • Storage Management (*1)

OK

OK

OK

N/A

OK

OK
 

Snap Data Pool

One of the following policies is required:

  • Status Display

  • Advanced Copy Management

OK

OK

OK

N/A

OK

OK

Copy Path

OK

OK

OK

N/A

OK

OK

REC Buffer

OK

OK

OK

N/A

OK

OK

REC Disk Buffer

OK

OK

OK

N/A

OK

OK
*1  :  When displaying the set state for the Advanced Copy license, the "Storage Management" policy is also required.

Advanced Copy Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Start SnapOPC+

Copy Session Management

N/A

OK

OK

N/A

N/A

OK

Stop Copy Session

N/A

OK

OK

N/A

N/A

OK

Register Advanced Copy License

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Delete Advanced Copy License

N/A

OK

N/A

N/A

N/A

OK

Register Veeam Storage Integration License

N/A

OK

N/A

N/A

N/A

OK

Delete Veeam Storage Integration License

N/A

OK

N/A

N/A

N/A

OK

Register License

N/A

OK

N/A

N/A

N/A

OK

Modify EC/OPC Priority

Advanced Copy Management

N/A

OK

OK

N/A

N/A

OK

Modify Copy Table Size

N/A

OK

OK

N/A

N/A

OK

Modify Copy Parameters

N/A

OK

OK

N/A

N/A

OK

Export Storage Information

N/A

OK

OK

N/A

N/A

OK

Set Copy Path

N/A

OK

OK

N/A

N/A

OK

Delete All Copy Path

N/A

OK

OK

N/A

N/A

OK

Export All Copy Path

N/A

OK

OK

N/A

N/A

OK

Measure Round Trip Time

N/A

OK

OK

N/A

N/A

OK

Modify REC Buffer

N/A

OK

OK

N/A

N/A

OK

Create REC Disk Buffer

N/A

OK

OK

N/A

N/A

OK

Assign REC Disk Buffer

N/A

OK

OK

N/A

N/A

OK

Delete REC Disk Buffer

N/A

OK

OK

N/A

N/A

OK

Format REC Disk Buffer

N/A

OK

OK

N/A

N/A

OK

Modify REC Multiplicity

N/A

OK

OK

N/A

N/A

OK

Set REC Bandwidth Limit

N/A

OK

OK

N/A

N/A

OK

Set REC Line Speed

N/A

OK

OK

N/A

N/A

OK

Enable ODX (*1)

One of the following policies is required:

  • Volume - Create / Modify

  • Volume - Delete / Format

  • Advanced Copy Management

N/A

OK

OK

N/A

N/A

OK

Disable ODX (*1)

N/A

OK

OK

N/A

N/A

OK

Create ODX Buffer Volume (*1)

N/A

OK

OK

N/A

N/A

OK
*1  :  When this function is used with the "Volume - Create / Modify" or "Volume - Delete / Format" policy, one of the following policies is also required to display the status screen: "Status Display", "Advanced Copy Management", "Copy Session Management", or "Storage Management".

Connectivity Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Connectivity (Basic Information)

One of the following policies is required:

  • Status Display

  • Host Interface Management

OK

OK

OK

N/A

OK

OK

Host Group

OK

OK

OK

N/A

OK

OK
 

FC Host

OK

OK

OK

N/A

OK

OK

iSCSI Host

OK

OK

OK

N/A

OK

OK

CA Port Group

OK

OK

OK

N/A

OK

OK
 

FC Port

OK

OK

OK

N/A

OK

OK

iSCSI Port

OK

OK

OK

N/A

OK

OK

LUN Group

OK

OK

OK

N/A

OK

OK

Host Response

OK

OK

OK

N/A

OK

OK

CA Reset Group

OK

OK

OK

N/A

OK

OK

Host-LU QoS

Host Interface Management

N/A

OK

OK

N/A

N/A

OK
 

FC Host QoS

N/A

OK

OK

N/A

N/A

OK

iSCSI Host QoS

N/A

OK

OK

N/A

N/A

OK

FC Port QoS

N/A

OK

OK

N/A

N/A

OK

iSCSI Port QoS

N/A

OK

OK

N/A

N/A

OK

LU QoS Group

N/A

OK

OK

N/A

N/A

OK

Connectivity Management (Action)

Host Affinity Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create Host Affinity

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Delete Host Affinity

N/A

OK

OK

N/A

N/A

OK

Modify Host Affinity

N/A

OK

OK

N/A

N/A

OK

Host Group Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Add FC Host Group

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Add iSCSI Host Group

N/A

OK

OK

N/A

N/A

OK

Delete Host Group

N/A

OK

OK

N/A

N/A

OK

Modify Host Group

N/A

OK

OK

N/A

N/A

OK

Add FC Host

N/A

OK

OK

N/A

N/A

OK

Add iSCSI Host

N/A

OK

OK

N/A

N/A

OK

Delete FC Host

N/A

OK

OK

N/A

N/A

OK

Delete iSCSI Host

N/A

OK

OK

N/A

N/A

OK

Modify FC Host

N/A

OK

OK

N/A

N/A

OK

Modify iSCSI Host

N/A

OK

OK

N/A

N/A

OK

CA Port Group Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create FC Port Group

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Create iSCSI Port Group

N/A

OK

OK

N/A

N/A

OK

Delete CA Port Group

N/A

OK

OK

N/A

N/A

OK

Modify CA Port Group

N/A

OK

OK

N/A

N/A

OK

Modify FC Port Parameters

N/A

OK

OK

N/A

N/A

OK

Modify iSCSI Port Parameters

N/A

OK

OK

N/A

N/A

OK

Modify Port Mode

N/A

OK

OK

N/A

N/A

OK

LUN Group Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Add LUN Group

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Delete LUN Group

N/A

OK

OK

N/A

N/A

OK

Modify LUN Group

N/A

OK

OK

N/A

N/A

OK

Host Response Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Add Host Response

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Delete Host Response

N/A

OK

OK

N/A

N/A

OK

Modify Host Response

N/A

OK

OK

N/A

N/A

OK

Modify CA Reset Group

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Modify CA Reset Group

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Host-LU QoS Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Enable/Disable QoS

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Initialize QoS

One of the following policies is required:

  • Volume - Create / Modify

  • Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Set Host-LU QoS

Host Interface Management

N/A

OK

OK

N/A

N/A

OK

Release Host-LU QoS

N/A

OK

OK

N/A

N/A

OK

Start Host-LU QoS Performance Monitoring

N/A

OK

OK

N/A

N/A

OK

Stop Host-LU QoS Performance Monitoring

N/A

OK

OK

N/A

N/A

OK

Set Host QoS Pattern

N/A

OK

OK

N/A

N/A

OK

Set Port QoS Pattern

N/A

OK

OK

N/A

N/A

OK

Set LU QoS Pattern

N/A

OK

OK

N/A

N/A

OK

Set FC Host QoS

N/A

OK

OK

N/A

N/A

OK

Set iSCSI Host QoS

N/A

OK

OK

N/A

N/A

OK

Set FC Port QoS

N/A

OK

OK

N/A

N/A

OK

Set iSCSI Port QoS

N/A

OK

OK

N/A

N/A

OK

Add LU QoS Group

N/A

OK

OK

N/A

N/A

OK

Delete LU QoS Group

N/A

OK

OK

N/A

N/A

OK

Modify LU QoS Group

N/A

OK

OK

N/A

N/A

OK

Component Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Storage (Basic Information)

One of the following policies is required:

  • Status Display

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Controller Enclosure

OK

OK

OK

N/A

OK

OK
 

Controller Module

OK

OK

OK

N/A

OK

OK
 

Performance (CM)

OK

OK

OK

N/A

OK

OK

Channel Adapter

OK

OK

OK

N/A

OK

OK
 

Performance (CA)

OK

OK

OK

N/A

OK

OK

Login Host

OK

OK

OK

N/A

OK

OK

Drive Adapter

OK

OK

OK

N/A

OK

OK

Bootup and Utility Device

OK

OK

OK

N/A

OK

OK

Power Supply Unit (CE)

OK

OK

OK

N/A

OK

OK

Battery (BTU/BCU)

OK

OK

OK

N/A

OK

OK

Frontend Enclosure

OK

OK

OK

N/A

OK

OK
 

Frontend Router

OK

OK

OK

N/A

OK

OK

Service Controller

OK

OK

OK

N/A

OK

OK

Power Supply Unit (FE)

OK

OK

OK

N/A

OK

OK

FAN Unit

OK

OK

OK

N/A

OK

OK

Operation Panel

OK

OK

OK

N/A

OK

OK

Drive Enclosure

OK

OK

OK

N/A

OK

OK
 

I/O Module

OK

OK

OK

N/A

OK

OK

Power Supply Unit (DE)

N/A

OK

N/A

N/A

OK

OK

Drives

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK
 

Performance (Drives)

One of the following policies is required:

  • Status Display

  • Maintenance Information

OK

OK

OK

N/A

OK

OK

Component Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Turn on Locator Beacon/Turn off Locator Beacon

Status Display

OK

OK

OK

N/A

OK

OK

Hot Preventive Maintenance

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Assign Global Hot Spare

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Release Global Hot Spare

N/A

OK

OK

N/A

N/A

OK

Assign Dedicated Hot Spare

N/A

OK

OK

N/A

N/A

OK

Release Dedicated Hot Spare

N/A

OK

OK

N/A

N/A

OK

Force Enable Module

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Force Disable Module

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Sanitize Drive

N/A

N/A

N/A

N/A

N/A

OK

Add Controller Enclosure

N/A

N/A

N/A

N/A

N/A

OK

Add Memory

N/A

N/A

N/A

N/A

N/A

OK

Add Channel Adapter

N/A

N/A

N/A

N/A

N/A

OK

Add Drive Adapter

N/A

N/A

N/A

N/A

N/A

OK

Add Drive Enclosure

N/A

OK

N/A

N/A

N/A

OK

Remove Disk Drive

N/A

N/A

N/A

N/A

N/A

OK

Remove Channel Adapter

N/A

N/A

N/A

N/A

N/A

OK

Remove Drive Adapter

N/A

N/A

N/A

N/A

N/A

OK

Remove Drive Enclosure

N/A

N/A

N/A

N/A

N/A

OK

Export Performance Information

One of the following policies is required:

  • Status Display

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Start Disk Diagnosis

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

System Management (Display)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

System (Basic Information)

One of the following policies is required:

  • Status Display

  • Storage Management

  • User Management

  • Authentication / Role

  • Security Setting

  • Maintenance Information

  • Firmware Management

  • Maintenance Operation

OK

OK

OK

OK

OK

OK

Network

One of the following policies is required:

  • Status Display

  • Storage Management

OK

OK

OK

N/A

OK

OK

Remote Support (REMCS)

One of the following policies is required:

  • Status Display

  • Storage Management

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Define Role

One of the following policies is required:

  • User Management

  • Authentication / Role

N/A

OK

N/A

OK

N/A

N/A

Eco-mode

One of the following policies is required:

  • Status Display

  • RAID Group Management

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Event/Dump

One of the following policies is required:

  • Status Display

  • Storage Management

  • Maintenance Information

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

Audit Log

Security Setting

N/A

OK

N/A

N/A

OK

N/A

Firmware Maintenance

One of the following policies is required:

  • Firmware Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Storage Migration

One of the following policies is required:

  • Status Display

  • Storage Migration Management

OK

OK

OK

N/A

OK

OK

External Drives

One of the following policies is required:

  • Status Display

  • RAID Group Management

OK

OK

OK

N/A

OK

OK

Extreme Cache Pool

One of the following policies is required:

  • Status Display

  • Storage Management

OK

OK

OK

N/A

OK

OK

Utility

One of the following policies is required:

  • Storage Management

  • Maintenance Information

  • Maintenance Operation

N/A

OK

N/A

N/A

OK

OK

System Settings

One of the following policies is required:

  • Status Display

  • Advanced Copy Management

  • Storage Management

  • Security Setting

  • Maintenance Operation

OK

OK

OK

N/A

OK

OK

System Management (Action)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Initial Setup

One of the following policies is required:

  • Storage Management

  • Security Setting

N/A

OK

N/A

N/A

OK

OK

Start/End Maintenance

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Change User Password

One of the following policies is required:

  • Status Display

  • Storage Management

  • User Management

  • Authentication / Role

  • Security Setting

  • Maintenance Information

  • Maintenance Operation

OK

OK

OK

OK

OK

OK

Set SSH Public Key

OK

OK

OK

OK

OK

OK

Set Deduplication/Compression Mode

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Enable RESTful API

Storage Management

N/A

OK

N/A

N/A

N/A

N/A

Register Non-disruptive Storage Migration License

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Delete Non-disruptive Storage Migration License

N/A

OK

N/A

N/A

N/A

OK

System Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Modify Storage System Name

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Modify Date and Time

N/A

OK

N/A

N/A

N/A

OK

Change Box ID

Advanced Copy Management

N/A

OK

OK

N/A

N/A

OK

Setup Subsystem Parameters

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Setup Encryption Mode

Security Setting

N/A

OK

N/A

N/A

OK

N/A

Setup SMI-S Environment

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Register SED Authentication Key

Security Setting

N/A

OK

N/A

N/A

OK

N/A

Setup Power Management

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Setup Exclusive Read Cache

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Setup Disk Drive Patrol

One of the following policies is required:

  • Storage Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Setup Debug Mode

N/A

OK

N/A

N/A

N/A

OK

Modify Disk Performance Monitor

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Extreme Cache Pool Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Setup Extreme Cache Pool

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Release Extreme Cache Pool

N/A

OK

N/A

N/A

N/A

OK

Utility Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Reset Backup/Restore Fail

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Reset Machine Down Recovery Fail

N/A

N/A

N/A

N/A

N/A

OK

Force Write Back

N/A

N/A

N/A

N/A

N/A

OK

Clear Sense Data

N/A

N/A

N/A

N/A

N/A

OK

Initialize BUD

N/A

N/A

N/A

N/A

N/A

OK

Force Restore

N/A

N/A

N/A

N/A

N/A

OK

Force Restore Thin Provisioning

N/A

N/A

N/A

N/A

N/A

OK

Change Main CM

N/A

N/A

N/A

N/A

N/A

OK

Reboot All CMs

N/A

N/A

N/A

N/A

N/A

OK

Shutdown/Restart Storage System

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Apply Configuration

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Cancel Applying Configuration

N/A

N/A

N/A

N/A

N/A

OK

Backup Configuration

Maintenance Information

N/A

OK

N/A

N/A

OK

OK

Export Configuration

N/A

OK

N/A

N/A

OK

OK

Start/Stop Performance Monitoring

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Clear Cache

N/A

OK

N/A

N/A

N/A

OK

Eco-mode Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Modify Eco-mode General Setting

One of the following policies is required:

  • RAID Group Management

  • Maintenance Operation

N/A

OK

OK

N/A

N/A

OK

Create Eco-mode Schedule

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Delete Eco-mode Schedule

N/A

OK

OK

N/A

N/A

OK

Modify Eco-mode Schedule

N/A

OK

OK

N/A

N/A

OK

User Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Setup User Account

User Management

N/A

OK

N/A

OK

N/A

N/A

Initialize User Account

N/A

OK

N/A

OK

N/A

N/A

Modify User Policy

N/A

OK

N/A

OK

N/A

N/A

Modify RADIUS

Authentication / Role

N/A

OK

N/A

OK

N/A

N/A

Add Role

N/A

OK

N/A

OK

N/A

N/A

Delete Role

N/A

OK

N/A

OK

N/A

N/A

Modify Role

N/A

OK

N/A

OK

N/A

N/A

Network Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Setup Network Environment

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Setup Firewall

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Agent Basic Interface

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Manager

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Agent MIB Access View

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Agent User

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Agent Community

N/A

OK

N/A

N/A

N/A

OK

Setup SNMP Agent Trap

N/A

OK

N/A

N/A

N/A

OK

Download MIB File

N/A

OK

N/A

N/A

N/A

OK

Send SNMP Trap Test

N/A

OK

N/A

N/A

N/A

OK

Display SMTP Log

N/A

OK

N/A

N/A

N/A

OK

Setup E-Mail Notification

N/A

OK

N/A

N/A

N/A

OK

Setup Syslog

N/A

OK

N/A

N/A

N/A

OK

Setup SSH Server Key

N/A

OK

N/A

N/A

N/A

OK

Create Self-signed SSL Certificate

N/A

OK

N/A

N/A

N/A

OK

Create Key/CSR

N/A

OK

N/A

N/A

N/A

OK

Register SSL Certificate

N/A

OK

N/A

N/A

N/A

OK
Setup SSL Security Configuration

One of the following policies is required:

  • Storage Management

  • Security Setting (*1)

N/A

OK

N/A

N/A

OK

OK
*1  :  When this function is used with the "Security Setting" policy, the "Status Display" policy or the "Storage Management" policy is also required to display the status screen.

Event/Dump Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Setup Event Notification

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Display/Delete Event Log

Maintenance Information

N/A

OK

N/A

N/A

OK

OK

Export/Delete Log (*1)

N/A

OK

N/A

N/A

OK

OK

Export/Delete Panic Dump (*2)

N/A

OK

N/A

N/A

OK

OK
*1  :  The "Maintenance Operation" policy is also required to delete logs.
*2  :  The "Maintenance Operation" policy is also required to delete panic dumps.

Audit Log Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Enable Audit Log

Security Setting

N/A

OK

N/A

N/A

OK

N/A

Disable Audit Log

N/A

OK

N/A

N/A

OK

N/A

Setup Audit Log

N/A

OK

N/A

N/A

OK

N/A

Storage Migration Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Start Storage Migration

Storage Migration Management

N/A

OK

OK

N/A

N/A

OK

Download Template File for Storage Migration Settings

N/A

OK

OK

N/A

N/A

OK

Delete Storage Migration Path

N/A

OK

OK

N/A

N/A

OK

Download Storage Migration Result

N/A

OK

OK

N/A

N/A

OK

Restart Storage Migration

N/A

OK

OK

N/A

N/A

OK

Suspend Storage Migration

N/A

OK

OK

N/A

N/A

OK

Stop Storage Migration

N/A

OK

OK

N/A

N/A

OK

External Drive Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Create External Drive

RAID Group Management

N/A

OK

OK

N/A

N/A

OK

Delete External Drive

N/A

OK

OK

N/A

N/A

OK

Remote Support Management (REMCS)

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Display Communication Log

Storage Management

N/A

OK

N/A

N/A

N/A

OK

Setup Remote Support

N/A

OK

N/A

N/A

N/A

OK

Update Customer Information

N/A

OK

N/A

N/A

N/A

OK

Update Communication Environment Information

N/A

OK

N/A

N/A

N/A

OK

Setup Log Sending Parameters

N/A

OK

N/A

N/A

N/A

OK

Stop/Restart Remote Support

N/A

OK

N/A

N/A

N/A

OK

Firmware Management

Function

Required policy for this function

Availability of executions in the default role

Monitor

Admin

Storage Admin

Account Admin

Security Admin

Maintainer

Apply Controller Firmware

One of the following policies is required:

  • Firmware Management

  • Maintenance Operation

N/A

OK

N/A

N/A

N/A

OK

Delete Controller Firmware Schedule

N/A

OK

N/A

N/A

N/A

OK

Delete Controller Firmware

Maintenance Operation

N/A

N/A

N/A

N/A

N/A

OK

Register Disk Firmware

N/A

N/A

N/A

N/A

N/A

OK

Apply Disk Firmware

N/A

N/A

N/A

N/A

N/A

OK

Delete Disk Firmware

N/A

N/A

N/A

N/A

N/A

OK

OK: Available    N/A: Not available