Roles and permissions

System Administrator Guide for VSP One Block 85

Version
A0-05-4x
Audience
anonymous
Part Number
MK-26VSP1B030-03
ft:lastEdition
2026-06-22

The following table lists the user roles and shows the permissions that each role provides to users. Custom user roles are not supported.

Important: The Support Personnel (Vendor Only) role contains permissions to perform maintenance on the storage system. Assign this role only to the accounts used by support personnel responsible for maintenance.
Role Permissions
Audit Log Administrator (View Only)
  • Viewing audit log information.
  • Downloading audit logs.
Audit Log Administrator (View & Modify)
  • Configuring audit log settings.
  • Downloading audit logs.
Security Administrator (View Only)
  • Viewing information about user accounts.
  • Viewing information about encryption settings.
  • Viewing information about external authentication with the maintenance utility.
  • Viewing the user session timeout period.
  • Viewing the settings of the Common Criteria certification.
  • Viewing the TLS security settings
  • Viewing information about Mainframe Fibre Channel Endpoint Security
Security Administrator (View & Modify)
  • Configuring user accounts.
  • Configuring user account security policies.
  • Configuring external authentication by the maintenance utility.
  • Generating and deleting encryption keys.
  • Cipher settings.
  • Backing up and restoring encryption keys.
  • Connection settings to external servers.
  • Configuring certificates for SSL/TLS communication.
  • Configuring the Common Criteria certification.
  • Configuring resource groups.
  • Editing virtual management settings.
  • Creating a CSR and self-signed certificate.
  • Editing the user session timeout period.
  • Setting reserve attributes for GAD.
  • Changing the TLS security settings
  • Configuring Mainframe Fibre Channel Endpoint Security settings
Storage Administrator (View Only)
  • Viewing storage system information.
Storage Administrator (Initial Configuration)
  • Configuring storage system settings.
  • Configuring SNMP settings.
  • Configuring settings for e-mail notification.
  • Configuring software license keys.
Storage Administrator (Local Copy)
  • Performing pair operations for local copy.
  • Configuring settings for local copy.
  • Splitting Volume Migration pairs.
Storage Administrator (Performance Management) Working with Export Tool 2.
Storage Administrator (Provisioning)
  • Configuring cache.
  • Configuring volumes, pools, and virtual volumes.
  • Formatting volumes.
  • Configuring external volumes.
  • Configuring Dynamic Provisioning.
  • Configuring host groups, paths, and WWNs.
  • Configuring NVM subsystems, namespaces, paths, and host NQNs.
  • Configuring Volume Migration except splitting Volume Migration pairs when using CCI.
  • Setting access attributes for volumes.
  • Configuring LUN security.
  • Configuring namespace security.
  • Creating and deleting quorum disks used with GAD.
  • Creating and deleting GAD pairs.
  • Configuring alias volumes for Compatible PAV.
Storage Administrator (Remote Copy)
  • Remote copy operations in general.
  • GAD pair operations (except create and delete).
Storage Administrator (System Resource Management)
  • Configuring settings for MP units.
  • Forcibly releasing exclusive locks of resources.
  • Configuring LUN security.
  • Remote copy operations in general.
  • Configuring the port attribute.
Support Personnel (Vendor Only) This role is for service representatives.
  • Maintenance operations performed by the vendor.
  • Working with Export Tool 2 (except for setting the sampling interval)
User Maintenance
  • Viewing storage system status.
  • Performing basic maintenance.
  • Completing SIMs.