ServerView Resource Orchestrator Cloud Edition V3.1.0 Design Guide

5.1.2 Roles and Available Operations

This section explains roles.

For details on how to configure roles and access scopes for users and user groups, refer to "Chapter 3. Configuring Users for Infrastructure Administrators" in the "User's Guide for Infrastructure Administrators (Resource Management)".

By specifying a combination of role and access scope for the target user or user group, the access privileges are restricted. The access scope is restricted by specifying resource folders, resource pools, or resources in the orchestration tree.

Among the users with the infrastructure admin role, those users who have had their scope of access limited can only refer to certain resources. For this reason, only an orchestration tree can be used among the trees of a resource tab. Switchover to other trees is not possible.

For details on trees, refer to "A.1 ROR Console" in the "User's Guide for Infrastructure Administrators (Resource Management) CE".

Operation Scopes of Roles

• Infrastructure Administrative Role

• Tenant Management Roles

• Tenant Users

• Multiple Roles

Table 5.3 Infrastructure Administrative Role

Type	Operation	Operator (Role)
		Infrastructure Administrators infra_admin	Infrastructure Operator infra_operator	Infrastructure Monitor monitor
Application Process	Approval	No	No	No
	Evaluation	Yes	No	No
L-Server/L-Platform	Creation	No	No	No
	Modification/Movement/Deletion	No	No	No
	Power Operation (Usage Change) (*1)	No	No	No
	Console Screen Acquisition	No	No	No
	Snapshot/Backup	No	No	No
	Image Collection	No	No	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
	Network Device Operation	No	No	Yes (*6)
Maintenance of L-Servers	Migration	Yes	No	No
	Conversion/Reversion	Yes	No	No
L-Server Templates	Import/Modification/Deletion	Yes	No	No
	Export	Yes	Yes	No
	Viewing	Yes	Yes	Yes
L-Platform Template	Create new templates	Yes	No	No
	Copying/Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*2)	Yes (*2)
L-Server for infrastructure administrator	Creation/Modification/Movement/Deletion	Yes	No	No
	Power operation (Usage change)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Snapshot/Backup	Yes	Yes	No
	Image Collection	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
Maintenance of the L-Server for the infrastructure administrator	Migration	Yes	No	No
Resource Pool	Creation/Modification/Movement/Deletion	Yes	No	No
	Resource registration/deletion (*3)	Yes	No	No
	Migration of resources between resource pools	Yes	No	No
	Monitoring	Yes	Yes	Yes
	Pool Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
Physical Server	Registration/Deletion	Yes	No	No
	Power control (*4)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Maintenance Mode Settings	Yes	No	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
VM Hosts	Registration/Deletion	Yes	No	No
	Power Operations	Yes	Yes	No
	Maintenance Mode Settings	Yes	No	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
Storage management software	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Disk	Registration/Deletion (*3)	Yes	No	No
	Modification	Yes	No	No
	Monitoring	Yes	Yes	Yes
Network	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Address	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Image	Modification	Yes	No	No
	Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Chassis	Creation/Modification/Deletion	Yes	No	No
	Power Operations	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
Power Monitoring Device	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Network Devices	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
	Management of Device Configuration Files	Yes	No	No
File Server	Viewing	Yes	No	No
Network Configuration Information	Import	Yes	No	No
	Export	Yes	No	No
Server NIC Definitions	Reflect/Display	Yes	No	No
Pre-configuration	Download	Yes	No	No
Tenants	Creation/Modification/Movement/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Resource Folders	Creation/Modification/Movement/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
	L-Server batch power operations under resource folders (*5)	Yes	Yes	No
Users	Modification of individual information	Yes	Yes	Yes
	Addition/Modification/Deletion of users in the user group the user belongs to	Yes	No	No
	Addition/Modification/Deletion of users in other user groups	Yes	No	No
	Viewing	Yes	Yes	Yes
User Groups	Creation/Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes	Yes
L-Platform Template Software Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*2)	Yes (*2)
L-Platform Template Image Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*2)	Yes (*2)
L-Platform Template Segment Information	Creation	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*2)	Yes (*2)
L-Platform Template Template Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*2)	Yes (*2)
Usage Charges	Search by tenant	Yes	No	No
	Search by L-Platform	Yes	No	No

*1: Usage changes are only possible when L-Server attributes have been configured in advance.
*2: Information about L-Platform templates can only be obtained using the L-Platform API.
*3: Users whose access scopes are not restricted should perform resource registration.
*4: The power operations are also available from BladeViewer.
*5: Power operations are only carried out for the L-Server for the infrastructure administrator.
*6: It is possible to use rulesets for operations which infrastructure administrator prepare for displaying information of network devices.

Table 5.4 Tenant Management Roles

Type	Operation	Operator (Role)
		Tenant Administrators tenant_admin	Tenant Operator tenant_operator	Tenant Monitor tenant_monitor
Application Process	Approval	Yes (*1)	No	No
	Evaluation	No	No	No
L-Server/L-Platform	Creation	Yes	No	No
	Modification/Movement/Deletion	Yes	No	No
	Power Operation (Usage Change) (*2)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Snapshot/Backup	Yes	Yes	No
	Image Collection	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
	Network Device Operation	Yes	Yes	Yes (*5)
L-Server Templates	Import/Modification/Deletion	No	No	No
	Export	No	No	No
	Viewing	Yes	No	No
L-Platform Template	Create new templates	No	No	No
	Copying/Modification/Deletion	Yes (*3)	No	No
	Viewing	Yes	Yes (*4)	Yes (*4)
	Modification of L-Servers	No	No	No
Resource Pool	Monitoring	Yes	Yes	No
	Pool Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
Physical Server	Monitoring	Yes	Yes	No
	System Conditions	Yes	Yes	Yes
VM Hosts	Monitoring	Yes	Yes	No
Image	Modification	Yes	No	No
	Deletion	Yes	No	No
	Monitoring	Yes	Yes	No
Network Devices	Monitoring	Yes	Yes	No
Users	Modification of individual information	Yes	Yes	Yes
	Addition/Modification/Deletion of users in the tenant the user belongs to	Yes	No	No
	Addition/Modification/Deletion of users in another tenant	No	No	No
	Viewing	Yes	Yes	Yes
L-Platform Template Software Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*4)	Yes (*4)
L-Platform Template Image Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*4)	Yes (*4)
L-Platform Template Segment Information	Creation	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*4)	Yes (*4)
L-Platform Template Template Information	Creation	No	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*4)	Yes (*4)
Usage Charges	Search by tenant	No	No	No
	Search by L-Platform	Yes	No	No

*1: Tenant administrators approve L-Platform applications submitted by tenant users or other tenant administrators.
*2: Usage changes are only possible when L-Server attributes have been configured in advance.
*3: Only the data that the user copied can be changed or deleted.
*4: Information about L-Platform templates can only be obtained using the L-Platform API.
*5: It is possible to use rulesets for operations which infrastructure administrator prepare for displaying information of network devices.

Table 5.5 Tenant Users

Type	Operation	Tenant Users tenant_user	L-Platform User lplatform_user
Application Process	Approval	No	No
	Evaluation	No	No
L-Server/L-Platform	Creation	Yes	No
	Modification/Movement/Deletion	No	Yes
	Power Operation (Usage Change) (*)	No	Yes
	Console Screen Acquisition	No	Yes
	Snapshot/Backup	No	Yes
	Image Collection	No	No
	Monitoring	No	Yes
	System Conditions	No	Yes
	Network Device Operation	No	Yes
L-Server Templates	Import/Modification/Deletion	No	No
	Export	No	No
	Viewing	Yes	Yes
L-Platform Template	Create new templates	No	No
	Copying/Modification/Deletion	No	No
	Viewing	Yes	Yes
Resource Pool	Monitoring	Yes	Yes
Physical Server	Monitoring	Yes	Yes
	System Conditions	Yes	Yes
VM Hosts	Monitoring	Yes	Yes
Image	Modification	No	No
	Deletion	No	No
	Monitoring	Yes	Yes
Network Devices	Monitoring	Yes	Yes
Users	Modification of individual information	Yes	Yes
	Viewing	Yes	Yes
L-Platform Template Software Information	Creation	No	No
	Copying	No	No
	Modification/Deletion	No	No
	Viewing	Yes	No
L-Platform Template Image Information	Creation	No	No
	Copying	No	No
	Modification/Deletion/Display Modification	No	No
	Viewing	Yes	No
L-Platform Template Segment Information	Creation	No	No
	Modification/Deletion	No	No
	Viewing	Yes	No
L-Platform Template Template Information	Creation	No	No
	Copying	No	No
	Modification/Deletion/Display Modification	No	No
	Viewing	Yes	No
Usage Charges	Search by tenant	No	No
	Search by L-Platform	No	No

* Note: Usage changes are only possible when L-Server attributes have been configured in advance.

Table 5.6 Multiple Roles

Type	Operation	Administrator administrator	Operator operator	Monitor monitor
Application Process	Approval (*1)	Yes	No	No
	Evaluation	Yes	No	No
L-Server/L-Platform	Creation	Yes	No	No
	Modification/Movement/Deletion	Yes	No	No
	Power Operation (Usage Change) (*2)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Snapshot/Backup	Yes	Yes	No
	Image Collection	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
	Network Device Operation	Yes	Yes	Yes (*6)
Maintenance of L-Servers	Migration	Yes	No	No
	Conversion/Reversion	Yes	No	No
L-Server Templates	Import/Modification/Deletion	Yes	No	No
	Export	Yes	Yes	No
	Viewing	Yes	Yes	Yes
L-Platform Template	Create new templates	Yes	No	No
	Copying/Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*5)	Yes (*5)
L-Server for infrastructure administrator	Creation/Modification/Movement/Deletion	Yes	No	No
	Power operation (Usage change)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Snapshot/Backup	Yes	Yes	No
	Image Collection	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
Maintenance of the L-Server for the infrastructure administrator	Migration	Yes	No	No
Resource Pool	Creation/Modification/Movement/Deletion	Yes	No	No
	Resource registration/deletion (*3)	Yes	No	No
	Migration of resources between resource pools	Yes	No	No
	Monitoring	Yes	Yes	Yes
	Pool Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
Physical Server	Registration/Deletion	Yes	No	No
	Power control (*4)	Yes	Yes	No
	Console Screen Acquisition	Yes	Yes	No
	Maintenance Mode Settings	Yes	No	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
VM Hosts	Registration/Deletion	Yes	No	No
	Power Operations	Yes	Yes	No
	Maintenance Mode Settings	Yes	No	No
	Monitoring	Yes	Yes	Yes
	System Conditions	Yes	Yes	Yes
	Capacity Planning	Yes	Yes	Yes
Storage management software	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Disk	Registration/Deletion (*3)	Yes	No	No
	Modification	Yes	No	No
	Monitoring	Yes	Yes	Yes
Network	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Address	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Image	Modification	Yes	No	No
	Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Chassis	Creation/Modification/Deletion	Yes	No	No
	Power Operations	Yes	Yes	No
	Monitoring	Yes	Yes	Yes
Power Monitoring Device	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Network Devices	Creation/Modification/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
	Management of Device Configuration Files	Yes	No	No
File Server	Viewing	Yes	No	No
Network Configuration Information	Import	Yes	No	No
	Export	Yes	No	No
Server NIC Definitions	Reflect/Display	Yes	No	No
Pre-configuration	Download	Yes	No	No
Tenants	Creation/Modification/Movement/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
Resource Folders	Creation/Modification/Movement/Deletion	Yes	No	No
	Monitoring	Yes	Yes	Yes
	L-Server batch power operations under resource folders	Yes	Yes	No
Users	Modification of individual information	Yes	Yes	Yes
	Addition/Modification/Deletion of users in the user group the user belongs to	Yes	No	No
	Addition/Modification/Deletion of users in other user groups	Yes	No	No
	Viewing	Yes	Yes	Yes
User Groups	Creation/Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes	Yes
L-Platform Template Software Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*5)	Yes (*5)
L-Platform Template Image Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*5)	Yes (*5)
L-Platform Template Segment Information	Creation	Yes	No	No
	Modification/Deletion	Yes	No	No
	Viewing	Yes	Yes (*5)	Yes (*5)
L-Platform Template Template Information	Creation	Yes	No	No
	Copying	Yes	No	No
	Modification/Deletion/Display Modification	Yes	No	No
	Viewing	Yes	Yes (*5)	Yes (*5)
Usage Charges	Search by tenant	Yes	No	No
	Search by L-Platform	Yes	No	No

*1: Dual-role administrators approve L-Platform applications submitted by dual-role administrators.
*2: Usage changes are only possible when L-Server attributes have been configured in advance.
*3: Users whose access scopes are not restricted should perform resource registration.
*4: The power operations are also available from BladeViewer.
*5: Information about L-Platform templates can only be obtained using the L-Platform API.
*6: It is possible to use rulesets for operations which infrastructure administrator prepare for displaying information of network devices.

Note

Operate resources registered in a resource pool, by selecting the resource in the resource pool after selection from the orchestration tree. To operate resources which are not registered in resource pool or resources which are unable to be registered, use a user with full operation access scope.