All resource groups are normally assigned to the Security Administrator and the Audit Log Administrator.
Each resource group has a designated Storage Administrator who can access only their assigned resources and cannot access other resources.
The meta_resource group is the resource group consisting of all existing resources on the storage system (other than external volumes) before you configure your resource groups. The maximum number of resource groups that can be created on a storage system is 1023.
All resource groups to which all resources in the storage system belong can be assigned to a user group.
User accounts with All Resource Groups Assigned set to Yes have access all resources in the storage system. For example, if a user is a Security Administrator (View & Modify) and a Storage Administrator (View and Modify) and All Resource Groups Assigned is enabled on that user account, the user can edit the storage for all the resources. If allowing this access becomes a problem with security on the storage system, you can register the following two user accounts and use these different accounts for different purposes:
- A user account for a Security Administrator with All Resource Groups Assigned enabled.
- A user account for a Storage Administrator with All Resource Groups Assigned disabled and only some of the resource groups assigned.