VSP One Block supports several built-in user groups with predefined permissions based on the available roles. You can use these groups to begin managing user permissions and access control immediately, or you can create your own user groups tailored to meet your unique requirements. The storage system supports a maximum of 32 user groups, including the 9 built-in user groups.
Consider the following when setting up user groups:
- When a user is assigned to multiple user groups, the user has the permissions of all the roles in each user group that are enabled on the resource groups assigned to each user group.
- You can create two user accounts that are used by the same user playing two roles. For example, you can create user_1 and user_2 that are used by the same person, but user_1 is a security administrator that has access to all resource groups and user_2 is a storage administrator that has access to only one of the resource groups.
- All user groups, except for the Storage Administrator groups, have access to all resources in the storage systems.
- The Storage Administrator role does not have access to all resources by default. If you delete all the roles except for the Storage Administrator, you need to add all required resource groups to the Storage Administrator user group.
- All user groups must have resource groups assigned in order to perform operations on the storage system.
You can perform user group operations using the following user interfaces:
- Maintenance utility
- REST API