Sun Microsystems 7000 manual Security, Roles

2.0Configuring Sun Storage 7000 Unified Storage System for VMware ESX

2.1Security

It is recommended that you create a local user on the Sun Storage 7000 Unified Storage System that is associated with a role that allows limited configuration and control for shares within a specific project dedicated to VMware ESX use. That project is first created by the super-user role.

For that purpose, a role called VMUser_Role is created in Configuration -> Users -> Roles. This role is given access to two projects, vm-nfsand vm-iscsi. The role will have the ability to perform operations in those projects only. The role has also been given authorization for using Analytics and Worksheets as well as Replication. Specific policies around this role may vary from the example.

Figure 3: Roles

Once the role is created, the next step is to create a user that can be associated with this role. In the example shown, the user is created as a local user on the Sun Storage 7000 Unified Storage System. This user could also be maintained in a directory service. Note that this user configuration is solely to

6 Using Sun Storage 7000 Unified Storage System With VMware ESX Server