Web-Based Admin View restricts access to specific operation management GUIs by using user groups in the management server.
The table below shows the groups used for operation management GUIs of PRIMECLUSTER.
GUI name | UNIX user group name | Privileges |
|---|---|---|
All GUIs | wvroot | Root authority. This group can execute all operations. |
Cluster Admin | clroot | Root authority. This group can specify settings, execute management commands, and display information. |
cladmin | Administrator authority. This group cannot specify settings. It can execute management commands and display information. | |
clmon | User authority. This group cannot specify settings and cannot execute management commands. It can only display information. | |
GDS (Global Disk Services) | sdxroot | Root authority. This group can use the GDS management view. |
The groups for the operation management GUIs are defined as shown in the above table.
wvroot is a special user group, and is used for Web-Based Admin View and GUIs. Users belonging to this group are granted the highest access privileges for Web-Based Admin View and all kinds of operation management GUIs.
The system administrator can grant different access privileges to users according to the products that the users need to use.
For example, a user who belongs to the "clroot" group but not to "sdxroot" is granted all access privileges when opening the Cluster Admin screen but no access privileges when opening the Global Disk Services (GDS) GUIs.
You need to create the above UNIX groups for both the primary and secondary management servers as necessary, and assign users to these groups. The Web-Based Admin View group membership should maintain consistency among all management servers associated with a specific cluster system. To set a user group, execute the "useradd(1M)" command as follows:
# useradd -g wvroot usrname
The root user is granted the highest access privilege regardless of which group the root user belongs to.
For details about user groups, see "3.1.1 User group determination" in the "PRIMECLUSTER Web-Based Admin View Operation Guide."
