Citrix Systems 5.6 specification

Permission

Allows Assignee To

Rationale/Comments

Pool management

•Set pool properties (naming, default SRs)

•Enable, disable, and configure

HA

•Set per-VM HA restart priorities

•Enable, disable, and configure Workload Balancing (WLB)

•Add and remove server from pool

•Emergency transition to master

•Emergency master address

•Emergency recover slaves

•Designate new master

•Manage pool and server certificates

•Patching

•Set server properties

•Configure server logging

•Enable and disable servers

•Shut down, reboot, and power-on servers

•System status reports

•Apply license

•Live migration of all other VMs on a server to another server, due to either WLB, Maintenance Mode, or HA

•Configure server management interfaces

•Disable server management

•Delete crashdumps

•Add, edit, and remove networks

•Add, edit, and remove PBDs/ PIFs/VLANs/Bonds/SRs

•Add, remove, and retrieve secrets

This permission includes all the actions required to maintain a pool.

Note: If the management interface is not functioning, no logins can authenticate except local root logins.

12

Image 32

Citrix Systems 5.6 manual Permission Allows Assignee To Rationale/Comments

Contents

Citrix XenServer 5.6 Administrators Guide Trademarks Table of Contents Managing users Storage ISO NFS VHD Configuring VM memory Viii Workload Balancing Page Page Backup and recovery 123 Monitoring and managing XenServer 136 Xiv Page Xvi Xvii Xviii Xix Index 214 Document Overview How this Guide relates to other documentation Authenticating users using Active Directory AD Managing users Configuring Active Directory authentication Upgrading from XenServer Enabling external authentication on a pool User authentication Disabling external authenticationAllowing a user access to XenServer using the CLI Removing access for a user using the CLI Removing access for a user Listing subjects with accessTerminating all authenticated sessions using xe Terminating individual user sessions using xe Role Based Access Control Roles Rbac process Permissions available for each role Definitions of Rbac roles and permissionsUsers role can be changed in two ways Definitions of permissions WLB Definitions of permissions Permission Allows Assignee To Rationale/Comments Permission Allows Assignee To Rationale/Comments Permission Allows Assignee To Rationale/Comments Working with Rbac using the xe CLI To list all the available defined roles in XenServer To display a list of current subjects To assign an Rbac role to a created subject Run the command xe subject-add subject-name=AD user/groupTo add a subject to Rbac Audit log xe CLI commands AuditingTo change a subjects Rbac role To obtain all audit records from the pool How does XenServer compute the roles for the session? Hosts and resource pools overview Requirements for creating resource pools Creating a resource pool Naming a resource pool Creating heterogeneous resource pools Adding shared storage Removing a XenServer host from a resource pool Adding NFS shared storage to a resource pool using the CLITo remove a host from a resource pool using the CLI High Availability HA OverviewOvercommitting Overcommitment Warning Configuration Requirements Restart priorities Enabling HA using the CLI Enabling HA on a XenServer pool Removing HA protection from a VM using the CLI Recovering an unreachable hostShutting down a host when HA is enabled Shutting down a VM when it is protected by HA Using the CLI to Manage Host Power On Host Power OnPowering on hosts remotely Key/Value Pairs To enable Host Power On using the CLITo turn on hosts remotely using the CLI Sample Script Possible values Storage Overview Storage Repositories SRsVirtual Disk Images VDIs Physical Block Devices PBDs Virtual Disk Data Formats Virtual Block Devices VBDsSummary of Storage objects VHD-based VDIs VHD Chain Coalescing LUN-based VDIs Storage configurationCreating Storage Repositories Creating a raw virtual disk using the xe CLI Upgrading LVM storage from XenServer 5.0 or earlierLVM performance considerations VDI types Converting between VDI formats Probing an SR Following parameters can be probed for each SR type Page To enable storage multipathing using the xe CLI Storage Multipathing Storage Repository Types Local LVM Local EXT3 VHDCreating a local LVM SR lvm Creating a local EXT3 SR ext Creating a shared EqualLogic SR UdevEqualLogic Parameter Name Description Optional? Creating a VDI using the CLI NetApp FlexVols Aggregates Access Control Thick or thin provisioningFAS Deduplication Licenses Creating a shared NetApp SR over iSCSI Taking VDI snapshots with a NetApp SR Software iSCSI SupportManaging VDIs in a NetApp SR Managing Hardware Host Bus Adapters HBAs XenServer Host iSCSI configurationSample QLogic iSCSI HBA setup LVM over iSCSI Removing HBA-based SAS, FC or iSCSI device entries Parameter Name Description Optional? Hitachi NFS VHD LVM over hardware HBA Creating a shared NFS SR nfs Citrix StorageLink Gateway Cslg SRs Creating a shared StorageLink SR Parameter name Description Optional? To create a Cslg SR Page Managing Storage Repositories Destroying or forgetting a SR Introducing an SR Resizing an SR Converting local Fibre Channel SRs to shared SRsMoving Virtual Disk Images VDIs between SRs Copying all of a VMs VDIs to a different SR Virtual disk QoS settings Adjusting the disk IO scheduler Possible values of qosalgorithmparamsched are What is Dynamic Memory Control DMC? Concept of dynamic range How does DMC Work? Concept of static rangeDMC Behaviour Memory constraints Supported operating systems Display the dynamic memory properties of a VM Xe CLI commandsDisplay the static memory properties of a VM Updating memory properties Workload Balancing interaction Upgrade issuesUpdate individual memory properties Networking XenServer networking overview Using VLANs with host management interfaces Using VLANs with virtual machinesNetwork objects Networks Using VLANs with dedicated storage NICs NIC bonds Creating networks in a standalone server Managing networking configurationInitial networking configuration To add a new network using the CLI To connect a network to an external Vlan using the CLICreating networks in resource pools Creating VLANs Bonding two NICs together Creating NIC bonds on a standalone hostCreating a NIC bond on a dual-NIC host Reverting NIC bonds Creating NIC bonds in resource poolsControlling the MAC address of the bond Adding NIC bonds to new resource pools Adding NIC bonds to an existing pool To add NIC bonds to the pool master and other hosts Configuring a dedicated storage NIC Controlling Quality of Service QoSChanging networking configuration options To assign NIC functions using the xe CLI Changing IP address configuration for a standalone host Changing IP address configuration in resource poolsHostname DNS servers Disabling management access To change the IP address of a pool master hostManagement interface To change the NIC used for the management interface NIC/PIF ordering in resource pools Adding a new physical NICVerifying NIC ordering Re-ordering NICs Networking Troubleshooting Diagnosing network corruption Recovering from a bad network configuration New Features Whats New? Workload Balancing Overview Changes Workload Balancing Installation Overview Workload Balancing Basic Concepts Workload Balancing System Requirements Supported XenServer VersionsSupported Operating Systems Recommended Hardware SQL Server Database Authentication Requirements Workload Balancing Data Store Requirements Preinstallation Considerations Operating System Language Support Installing Workload Balancing WLB Access Control Permissions To install Workload Balancing server To verify your Workload Balancing installation Configuring Firewalls Upgrading Workload Balancing Initializing Workload Balancing Upgrading Workload Balancing on the Same Operating SystemUpgrading SQL Server Upgrading Workload Balancing and the Operating System To initialize Workload Balancing Authorization for Workload Balancing Configuring Workload Balancing Settings Configuring Antivirus Software To display the Workload Balancing Configuration dialog box Adjusting the Optimization ModeFixed Scheduled To edit or delete an automatic optimization interval Optimizing and Managing Power AutomaticallyTo set an optimization mode for all time periods Enabling Workload Balancing Power Management Accepting Optimization Recommendations Automatically 102 To apply optimization recommendations automatically To select servers for power managementChanging the Critical Thresholds To change the critical thresholds Tuning Metric WeightingsDefault Settings for Critical Thresholds To edit metric weighting factors Excluding Hosts from Recommendations Historical Data Storage Time VM Optimization Criteria Number of Times an Optimization Recommendation is Made To configure VM Recommendation intervals To start a virtual machine on the optimal server To resume a virtual machine on the optimal server To accept an optimization recommendation Administering Workload BalancingAccepting Optimization Recommendations Reconfiguring a Pool to Use Another WLB Server Disabling Workload Balancing Click Update Credentials Updating Workload Balancing Credentials Customizing Workload Balancing Entering Maintenance Mode with Workload Balancing EnabledUninstalling Workload Balancing To enter maintenance mode with Workload Balancing enabled Working with Workload Balancing ReportsIntroduction Subscribing to Workload Balancing Reports Using Workload Balancing Reports for Tasks Generating and Managing Workload Balancing ReportsTo generate a Workload Balancing report To subscribe to a Workload Balancing report Report Toolbar Buttons To cancel a report subscriptionTo navigate in a Workload Balancing Report Report Generation Features Displaying Workload Balancing ReportsTo print a Workload Balancing report Toolbar Buttons Workload Balancing Report Glossary Host Health History Pool Optimization Performance History Pool Audit Log History Pool Health Audit Log Event Names Pool Health History Pool Optimization History Virtual Machine Motion History Virtual Machine Performance History Backups To backup pool metadataTo backup host configuration and software To backup a VM Backup and restore using xsconsole Full metadata backup and disaster recovery DRDR and metadata backup overview Moving SRs between hosts and Pools Using Portable SRs for Manual Multi-Site Disaster Recovery VM Snapshots Regular Snapshots Quiesced SnapshotsSnapshots with memory Creating a VM Snapshot To list the snapshots on a particular VM Creating a snapshot with memoryTo list all of the snapshots on a XenServer pool Restoring a VM to its previous state Deleting a snapshot Snapshot Templates Creating a template from a snapshot Exporting a snapshot to a template Advanced Notes for Quiesced Snapshots 132 Master failures Coping with machine failuresMember failures Physical Machine failure Coping with Failure due to Configuration ErrorsPool failures To restore a pool with all hosts failed To restore a VM when VM storage is not available Monitoring and managing XenServer Alerts Customizing Alerts Valid VM Elements Configuring Email Alerts Valid Host Elements Custom Fields and Tags Custom SearchesDetermining throughput of physical bus adapters To determine PBD throughput To write logs to a remote server XenServer host logsSending host log messages to a central server XenCenter logs Userprofile%\AppData\Citrix\XenCenter\logs\XenCenter.log Xe command-name argument=value argument=value Basic xe syntax Special characters and syntax Command types Class-list Class-param-list uuid=uuid Low-level param commandsParameter types Low-level list commands Xe command reference Bonding commandsBond parameters Bond-create CD commands CD parameters Console commands Console parametersCd-list Cd-listparams=param1,param2,... parameter=parametervalue Event-wait Event commandsEvent classes Host parameters Host XenServer host commandsHost selectors Parameter Name Description Type Syslogdestination Host-backup Host-backupfile-name=backupfilenamehost=hostname Host-disable Host-emergency-management-reconfigureHost-bugreport-upload Host-crashdump-destroy Host-enable Host-evacuateHost-forget Host-get-system-status Host-get-system-status-capabilities Attribute Description Host-is-in-emergency-mode Host-apply-editionLicense-server-address License-server-port Host-management-disable Host-management-reconfigureHost-license-view Host-logs-download Host-power-on Host-set-power-onHost-reboot Host-restore Log commands Message commands Message parametersMessage-create Message-list Network commands Network parametersSubnet/netmask/gateway 192.168.0.4 Patch update commands Patch parametersNetwork-create Network-destroy PBD commands PBD parameters PIF commands Pbd-createPbd-destroy Pbd-plug PIF parameters MAC Dhcp Pif-forget uuid=uuidofpif Pif-forgetPif-introduce Pool commands Pool parameters Parameter Name Description Type Pool-emergency-reset-master Pool-ha-enablePool-designate-new-master Pool-dump-database Storage Manager commands SM parameters SR commands SR parameters Sr-create Sr-destroySr-forget Sr-destroy uuid=sruuid Task commands Task parametersSr-introduce Sr-probe Task-cancel uuid=taskuuid Template commandsTask-cancel Template parameters For memory-dynamic-max Uuid=vmuuid \ Parameter Name Description Type As not in database for YyyymmddThhmmss z Not in database for a Form yyyymmddThhmmss Update commands User commandsUpdate-upload User-password-change VBD commands VBD parameters Vbd-create VDI commands VDI parameters Vdi-clone Vdi-copyVdi-create Tree /local/domain/0/backend Vdi-destroy Vdi-forgetVdi-import Vdi-introduce VIF commands VIF parametersVdi-unlock Vdi-unlockuuid=uuidofvditounlock force=true Uuid=vifuuid \ Vif-create Vif-destroyVif-plug Vif-unplug Vlan commands VM commandsVM selectors VM parameters Parameter Name Description Type Uuid=templateuuid \ Parameter Name Description Type Value pair autopoweron true VCPUs-number to a value Domain/domid/vm Vm-cd-ejectvm-selector=vmselectorvalue Vm-cd-addVm-cd-eject Vm-cd-insert Vm-cd-listVm-cd-remove Vm-clone Vm-copy Vm-crashdump-listVm-data-source-forget Vm-data-source-list Vm-data-source-query Vm-data-source-recordVm-destroy Vm-disk-add Vm-disk-list Vm-disk-removeVm-export Vm-import Vm-migrate Vm-installVm-memory-shadow-multiplier-set Vm-reboot Vm-reset-powerstateVm-resume Vm-shutdown Vm-uninstall Vm-startVm-suspend Vm-vcpu-hotplug Workload Balancing commands Pool-certificate-sync Pool-certificate-installPool-certificate-list Pool-deconfigure-wlb Pool-retrieve-wlb-configurationPool-param-set Pool-retrieve-wlb-recommendations Pool-send-wlb-configuration Pool-send-wlb-configuration Index