Viewing All User Roles

Context

• On the user role management page, click to refresh user roles.
• On the user role management page, click next to a parameter and enter a keyword to search for desired user roles.

Procedure

1. Choose Settings > User and Security > Users and Roles > Role Management.

2. Click next to a desired role. In the function pane, view information about the role. Table 1 describes related parameters.

   Table 1 Role parameters

   Parameter	Description
   Object	Object name of a role.
   Permission Group	Permission group of a role.
   Read/Write Permission	Read and write permissions of a role. Possible values are Read-only and Read and write.

3. Table 2 lists permissions of the built-in system roles.

   Table 2 Roles and permissions

   Role	Permissions
   Super administrator	Has full control permissions on storage devices and can create and view users with various roles.
   Administrator	Has all permissions except user management and security management. NOTE: Security management includes security policy, session management, access control, certificate, and time configuration. The administrator has the permissions to view security policies, certificates, and time configuration. The administrator does not have the permission to upgrade clusters, expand or reduce clusters, or enable or upgrade the data pilot service. The user with this role can only change its own password and view its own permissions.
   System viewer	Has only the view permission of the administrator. NOTE: The user with this role can only change its own password and view its own permissions.
   Security administrator	Has the permissions to view licenses and configure system security, including the configuration of time, external key service, security policy, domain authentication, and access control. NOTE: The user with this role can only change its own password and view its own permissions.
   SAN resource administrator	Has the permissions to configure block resources and snapshot features. NOTE: A SAN resource administrator has the permissions to view security policies, license management, storage pools, service networks, task centers, data protection, and clusters. The user with this role can only change its own password and view its own permissions.
   Machine-machine account	Has all permissions except session management and access control. NOTE: A machine-machine account has the permission to view security policies.