VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manuel d'utilisateur télécharger pdf (Page 33)

VMware, Inc. 33

Securityoperationsareoftenmanagedbymultipleindividuals.Managementoftheoverallsystemis

delegatedtodifferentpersonnelaccordingtosomelogicalcategorization.However,permissiontocarryout

tasksislimitedonlytouserswithappropriaterightstospecificresources.FromtheUserssection,youcan

delegatesuchresourcemanagementto

usersbygrantingapplicablerights.

UsermanagementinthevShieldManageruserinterfaceisseparatefromusermanagementintheCLIofany

vShieldcomponent.

Thischapterincludesthefollowingtopics:

 “ManagingUserRights”onpage 33

 “A d d aUser”onpage 34

 “A s s i g n aRoleandRightstoaUser”onpage 34

 “EditaUserAccount”onpage 34

 “DeleteaUserAccount”onpage 35

Managing User Rights

WithinthevShieldManageruserinterface,auser’srightsdefinetheactionstheuserisallowedtoperformon

agivenresource.Rightsdeterminetheuser’sauthorizedactivitiesonthegivenresource,ensuringthatauser

hasaccessonlytothefunctionsnecessarytocompleteapplicableoperations.Thisallowsdomaincontrol

over

specificresources,orsystem‐widecontrolifyourrightencompassestheSystemresource.

Thefollowingrulesareenforced:

 Ausercanonlyhaveonerighttooneresource.

 Ausercannotaddtoorremoveassignedrightsandresources.

User Management

Table 5-1. vShield Manager User Rights

Right Description

RReadonly

CRUD ReadandWrite

Table 5-2. vShield Manager User Resources

Resource Description

System AccesstoentirevShieldsystem

Datacenter Accesstoaspecifieddatacenterresource

Cluster Accesstoaspecifiedclusterresource

None Accesstonoresources

1 2 ... 28 29 30 31 32 33 34 35 36 37 38 ... 161 162

Pas de commentaire

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manuel d'utilisateur Page 33