Keycloak uses the following concepts to manage users and user access to the VSP One File management software:
- Realms
- A realm contains a set of users, credentials, roles, and groups, and administrators manage and authenticate users within it. Realms are isolated from each other and each realm has its own configurations and data.
- A realm for VSP One File is preconfigured to contain all of the roles required to maintain the VSP One File management software.
- Roles and groups
- Roles are used to manage access to resources and functionalities within applications. Roles are sets of permissions that are assigned to users or groups, and determine the actions that users or users in a group can perform.
- Groups simplify user management by allowing you to assign roles to users collectively rather than individually. Groups inherit roles and attributes, making them a powerful tool for managing permissions and streamlining access control across multiple accounts.
- For the VSP One File management software, there are 10 preconfigured roles and 10 preconfigured groups that inherit the roles. For example, the Administrators group inherits the admin role. Use these preconfigured entities to manage users. You cannot remove these roles and groups.
- The following table shows the preconfigured roles and groups.
-
Role Group Description admin Administrators Can perform all functions in File Administrator and System Administrator. admin_read_only Administrators Read Only Has read-only access to File Administrator and System Administrator. allow_access_to_fs_path_info NA Can set access control for virtual volume, SMB share, and NFS export directory paths in File Administrator. allow_access_to_fs_path_info_read_only NA Can view access control settings for virtual volume, SMB share, and NFS export directory paths in File Administrator. backup_and_replication_manager Backup and Replication Managers Can perform the following functions in File Administrator: - Manage NDMP backups of managed servers
- Manage file and object replication
- Manage data migration to cloud
backup_and_replication_manager_read_only Backup and Replication Managers Read Only Has read-only access to NDMP, replication services, and data migration. file_services_manager File Services Managers Can perform the following functions in File Administrator: - Manage enterprise virtual servers (EVS)
- Migrate EVS instances
- Manage file systems
- Manage file migration
- Manage data migration to cloud
- Manage file service protocols such as FTP, iSCSI, NFS, and SMB.
file_services_manager_read_only File Services Managers Read Only Has read-only access to EVS, file systems, and file systems protocols. security_admin Security Administrators Can perform all functions in Keycloak and System Administrator. A user assigned to the security_admin role should not be assigned to any other role.
security_admin_read_only Security Administrators Read Only Has read-only access to Keycloak and System Administrator. storage_manager Storage Managers Can perform the following tasks in File Administrator: - Manage storage pools
- Manage system drives
storage_manager_read_only Storage Managers Read Only Has read-only access to storage drives and system pools. - Users
- Users are individuals who are authenticated by Keycloak to access resources or applications. You can add users locally in Keycloak or you can import users from LDAP providers such as Active Directory.
- The preconfigured users admin, secadmin, and secadminro enable you to access and configure the VSP One File environment for the first time. You can continue to use the preconfigured users after the initial setup and you can add other users either locally in Keycloak or by connecting Keycloak to an LDAP provider.
- To add and configure users, see Configuring users in Keycloak.