Hardware Management Console Best Practices
- 23 -
5 User Management
The HMC provides a User Management facility to create and manage users, as
well as control their access to HMC tasks and managed system resources. User
roles can be assigned to each HMC user along with the associated tasks the roles
that can be performed. Before exploring how to use this facility, it’s helpful to
establish some common terminology.
• Resource – Also called a managed resource, this is an entity to be managed in
the system. Care should be taken to distinguish between resource type and
resource instance. Resource types represent all of the managed entities in
the same category, such as logical partitions (LPARs). Resource instances
mean individual managed entities, such as a specific LPAR.
• Task – In general, this is a function, typically a management operation
performed on a resource.
• Role - A set of predefined configuration records for access management. When
there is a need to assign a set of tasks for a certain resource, a role can be
used to associate the tasks with the resources. An example of how roles can
be of help is they allow separation of personnel management and work
assignment in a customer environment. The Task and Managed Resource
Roles section below contains more information on types of roles.
5.1 HMC Users and Access
The HMC comes with two predefined users: hscroot and root. Along with
hscpe, these user IDs are special, i.e. reserved. The hscroot user ID and
password are used to log in to the HMC when you configure the system after
installation. The root user ID and password are used by a service provider to
perform maintenance procedures, and cannot be used to log in to the HMC. The
hscpe user should only be created for use by a service provider when
performing problem determination. Afterward, it should be deleted, but recreated
again when needed in the future. See the section on Problem Determination.
The hscroot and root are predefined user IDs and cannot be deleted from the
HMC. They come with default passwords, but it is strongly recommended that
they be changed during HMC setup and configuration. While user root cannot
log in, hscroot can, and the hscroot user can change/set the password for the
root user. hscroot is in effect a common user ID across all HMCs in a
system environment. It has an hmcsuperadmin task role and can hence be
dangerous if present across all HMCs with the common, default password. You
will be prompted to change the password for both of these user IDs when using
the HMC Guided Setup Wizard. The passwords can also be modified as
described below.
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce