OnCommand Core - Provisioning manager

[scheckel]

Hi,

has anybody a reference architecture with provisioning manager and RBAC? The customer wants to separate provisioning and backup tasks to different departments. There are 25 locations, restore should be done independent.

Would be great to get some feedback. You can also contact me directly,

Best wishes,

Markus.

[adaikkap]

Hi Markus,

     Did you try the default roles ?

Below is the global provisioning role.

[root@vmlnx ~]# dfm role list -x GlobalProvisioning

Role-name: GlobalProvisioning

Role-id: 27

Description: Provisioning of Datasets

Inherited Roles:

        GlobalRead

        GlobalDataSet

        GlobalResourceControl

Capabilities:

Res Id  Resource Name                       Operation

------- ----------------------------------- -----------------------------------

0       Global                              DFM.Database.Read

0       Global                              DFM.BackupManager.Read

0       Global                              DFM.Mirror.Read

0       Global                              DFM.Event.Read

0       Global                              DFM.ConfigManagement.Read

0       Global                              DFM.Policy.Read

0       Global                              DFM.Core.AccessCheck

0       Global                              DFM.Schedule.Read

0       Global                              DFM.Report.Read

0       Global                              DFM.Alarm.Read

0       Global                              DFM.PerfThreshTemplate.Read

0       Global                              DFM.StorageService.Read

0       Global                              DFM.ApplicationPolicy.Read

0       Global                              DFM.DataSet.Write

0       Global                              DFM.DataSet.Create

0       Global                              DFM.DataSet.Delete

0       Global                              DFM.Resource.Control

0       Global                              DFM.ResourcePool.Provision

[root@vmlnx ~]#

Global Restore.

[root@vmlnx ~]# dfm role list -x GlobalRestore

Role-name: GlobalRestore

Role-id: 7

Description: Perform restore operations from backups

Inherited Roles: None

Capabilities:

Res Id  Resource Name                       Operation

------- ----------------------------------- -----------------------------------

0       Global                              DFM.BackupManager.Restore

0       Global                              DFM.BackupManager.RestoreFromSecondary

0       Global                              DFM.BackupManager.Read

[root@vmlnx ~]#