Hardware Management Console Best Practices
- 26 -
hscroot@myhost:~> lshmcusr --filter names=hscroot
name=hscroot,taskrole=hmcsuperadmin,description=,pwage
=99999,resourcerole=
From the HMC console as a user with hmcsuperadmin authority, you can
manage resource and task roles by selecting the HMC Management -> HMC
Users plugin, then selecting Manage Access Task Roles and Managed
Resource Roles. From the rendered dialog, you can choose to manage resource
roles or task roles by selecting a role type. From the Edit menu, you can Add…,
Copy…, Remove, or Modify… roles. Below are some notes on these tasks:
• You will be given an error if you try to modify or remove the predefined task
roles, or the AllSystemResources resource role.
• You cannot copy the AllSystemResources resource role. You can only copy
other, static managed resource roles.
• When adding or copying a resource role, ‘CEC Management’ and ‘All Logical
Partitions’ are resource types for the managed system and LPARs, respectively.
‘CEC Management’ includes ‘All Logical Partitions,’ but not vice-versa. Note
that LPAR profiles are implicit resources when a LPAR resource instance or
type is selected. Similarly, system profiles resources are implicit with managed
system resource instances or type.
• When adding or copying a task role, the available tasks to choose from are
limited based on the parent role (‘Based on’ drop-down box).
Any user role can view task and resource roles from the restricted shell using the
lsaccfg command. Below are some notes on this command:
• lsaccfg -t resourcerole won’t show AllSystemResources.
• lsaccfg –t resource does not show an equivalent to ‘CEC
Management.’ It instead only shows all available managed system resources. It
does have an ALL_PARTITIONS resource type however.
• lsaccfg –t resource shows managed resources in the form
“<ResourceID=resource_type:resource_ID><UserDefinedName=name_value>”
. The role commands typically are used in scripts, usually redirecting output to
mkaccfg or chaccfg to make or change new roles. These commands won’t
be input manually due to their complexity and verboseness. Therefore, there’s a
–script flag that makes the output more manageable:
• hscroot@myhost:~> lsaccfg -t resource –script
"resources=cec:root/ibmhscS1_0|9406-
520*10007CA|IBMHSC_ComputerSystem,lpar:root/ibmhscS1_
0|ALL_PARTITIONS*9406-
520*10007CA|IBMHSC_Partition,lpar:root/ibmhscS1_0|7*9
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce