HP StorageWorks Clustered File System 3.6.1 Windows Storage Server Edition administration guide (AG515 - 96007, August 2008)

Chapter 12: Configure Security Features 146
– Custom. Manipulate virtual hosts, service monitors, and device
monitors. Create affects the ability to create new application
objects. Modify affects the ability to change existing application
objects, including adding new servers to an object and rehosting
objects. Delete affects the ability to delete application objects.
– File Serving. Manipulate FS Option for Windows application
objects, including Virtual File Services and Cluster File Shares. This
resource is available when is installed. Create affects the ability to
create new application objects. Modify affects the ability to change
application objects. Delete affects the ability to remove application
objects.
Allow or Deny Rights
You can allow or deny rights as necessary for each role. A checkmark
indicates that the right is allowed. An X indicates that the right is denied.
Typically, the deny operation is used to exclude a user or group from a
particular right granted to a role to which the user or group belongs. For
example, a group might belong to a role that allows filesystem creation,
modification, and deletion; however, you do not want certain members of
the group to be able to delete filesystems. You would create a role just for
those users and deny the right to delete filesystems.
You can assign or deny rights for a role either manually or by using a
template.
Assign Rights Manually
Rights can be assigned at different resource levels. If rights are applied to
the top-level resource, they apply to all cluster resources. Rights assigned
to a second level resource such as Storage apply just to the resources
nested in that resource. For example, rights assigned to the Storage
resource apply to both the Volumes and Filesystems resources. You can
also assign rights to the lowest-level resources.
To allow a right, click once in the checkbox to display a checkmark. To
deny a right, click twice in the checkbox to display an X.
When you have completed your selections, go to the Members tab to
assign group or user accounts to the role.