You can control the users mapped into a tenant by specifying attributes. For example,
if you only want users assigned to a specific department in AD to be mapped into the
tenant, you can set key/value attributes. For example:
<user_mapping>
<domain>domain2.yourco.com</domain>
<attributes>
<attribute>
<key>department</key>
<value>development</value>
</attribute>
<attributes>
</user_mapping>
Alternatively, you can map users into the tenant based on their AD group. The
following user mapping maps members of the "lab users" group into the tenant:
<user_mapping>
<domain>domain2.yourco.com</domain>
<groups>
<group>lab users</group>
</groups>
</user_mapping>
You can include more than one <user_mapping> to enable users to be mapped from
any of the specified mappings.
If you included more than one group in a <user_mapping>, the user must belong to all
groups. In the example below, users must belong to both "lab users" and "lab
administrators" groups to be mapped into the tenant.
<user_mapping>
<domain>domain2.yourco.com</domain>
<groups>
<group>lab users</group>
<group>lab administrators</group>
</groups>
</user_mapping>
Response
<tenant>
<creation_time>1378919846777</creation_time>
<id>urn:storageos:TenantOrg:4edc456c-
c7f5-4c54-84b2-29715cc8f504:</id>
<inactive>false</inactive>
<link href="/tenants/urn:storageos:TenantOrg:4edc456c-
c7f5-4c54-84b2-29715cc8f504:" rel="self"/>
<name>EMC tenant</name>
<tags/>
<parent_tenant>
<id>urn:storageos:TenantOrg:e5013f5e-41d7-4cf9-
b1fd-4fecfad0c18c:</id>
<link href="/tenants/
urn:storageos:TenantOrg:e5013f5e-41d7-4cf9-b1fd-4fecfad0c18c:"
rel="self"/>
</parent_tenant>
<user_mappings>
<user_mapping>
<attributes/>
<domain>domain2.yourco.com</domain>
<groups/>
</user_mapping>
</user_mappings>
</tenant>
5. If you want to assign access to a virtual array to the newly created tenant you can use
the following steps.
By default, the access control list (ACL) for a virtual array is wide open and all tenants
have access. Once you assign a tenant to the ACL for a virtual array, only that tenant
will have access unless you assign other tenants to the ACL.
Setting Up Multiple Tenants
76 EMC ViPR 1.1.0 Installation and Configuration Guide
Commentaires sur ces manuels