Policies Tab

Policy management allows administrator to override the user’s HP SAM client settings. In general, the user is allowed the flexibility to customize the connection settings on the client side. If there are specific settings that the user must always connect with, then the administrator may use the Policies tab to define the forced settings.

The HP SAM hierarchical policy has 5 levels:

Global

Role

OU (organizational unit)

Security Group

User

Policy settings assigned to User override policy settings assigned to a Security Group, and so forth up the list.

Steps:

1.Create or update the policy in the Policies tab. To update an existing policy, click the policy name hyperlink.

2.Assign the policy:

to a role (User and Roles > Manage resource roles)

to a user, OU, or Security Group (User and Roles > Manage users)

HP SAM always creates the Global Policy. This policy applies to all user connections, unless overridden by other policies. The default sets the Auto Reconnect box to Off. This ensures multiple users do not attempt to log onto the same blade at the same time. When a network failure or something similar occurs, the user may unknowingly have been logged off that resource, depending on the network and AD group policy settings. HP SAM may allocate that computing resource to another user. If the auto- reconnect feature is turned on, the original user reconnects to this computing resource, which could potentially have been allocated to another person. If this is not a concern, then change Auto Reconnect to an appropriate value.

Table 4-1

Effective Hierarchical Policy Example

 

 

 

 

 

 

 

 

 

 

 

 

Parameter

Global

Role

OU

SG1

SG2

User

Effective

 

 

 

 

 

 

 

 

P1

ON

Not Assigned

Not Assigned

Not Assigned

Not Assigned

Not Assigned

ON

 

 

 

 

 

 

 

 

1P2

ON

OFF

Not Assigned

Not Assigned

Not Assigned

Not Assigned

OFF

P3

ON

OFF

ON

OFF

Not Assigned

Not Assigned

OFF

 

 

 

 

 

 

 

 

2P4

ON/No

OFF

Not Assigned

Not Assigned

Not Assigned

Not Assigned

ON

 

Overrides

 

 

 

 

 

 

 

Allowed

 

 

 

 

 

 

 

 

 

 

 

 

 

 

P5

ON/No

OFF/No

Not Assigned

Not Assigned

Not Assigned

Not Assigned

ON

 

Overrides

Overrides

 

 

 

 

 

 

Allowed

Allowed

 

 

 

 

 

 

 

 

 

 

 

 

 

68 Chapter 4 Administration