HP StorageWorks Fabric OS 6.x administrator guide (5697-7344, March 2008)

Fabric OS 6.x administrator guide 147
Figure 4 Fabric with AD0 and AD255
Admin Domain access levels
Admin Domains offer a hierarchy of administrative access. To manage Admin Domains, you must be a
physical fabric administrator. A “physical fabric administrator” is a user with the Admin role and access to
all Admin Domains (AD0 through AD255). Only a physical fabric administrator can perform Admin
Domain configuration and management.
Other administrative access is determined by your defined RBAC role and AD membership. Your role
determines your access level and permission to perform an operation. Your AD membership determines the
fabric resources that you can operate on.
Table 45 lists each Admin Domain user type and describes its administrative access and capabilities.
AD2
AD255
AD1
AD0
Table 45 AD user types
User type Description
Physical Fabric
Administrators
User account with Admin role and with access to all Admin Domains (AD0 through
AD255).
Create and manage all Admin Domains.
Assign other administrators or users to each Admin Domain.
Only a physical fabric administrator can create other physical fabric administrators.
Administrative
Domain Users
Can be assigned to one or more Admin Domains.
Manage the resources within their Admin Domains.
If their role permits, can create user accounts and assign them to Admin Domains in
their list.
Cannot view other Admin Domain definitions. They can view only members of their
own Admin Domains.