Viewing All User Roles

This operation enables you to view the roles of all users on the system management page.

On the user role management page, you can click to refresh user role information.
On the user role management page, you can click or next to a parameter and enter a keyword or select a parameter value to search for the required user role information.

Choose Settings > System Settings > Users and Roles > Role Management.

Click

next to the desired role. In the function pane, view role information. Table 1 describes related parameters.

**Table 1** Role parameters
Parameter	Description
Object	Indicates an object under the role.
Permission Group	Indicates a permission group of the role.
Read/Write Permission	Indicates the read and write permissions of a role. Possible values are Read-only and Read and write.

Table 2 lists permissions of the built-in system roles.

**Table 2** Roles and permissions
Role	Permissions
Super administrator	Has full control permissions on storage devices and can create and view users with various roles.
Administrator	Has all permissions except user management and security management. NOTE: Security management includes security policy, session management, access control, certificate management, and time configuration. An administrator has the permission to view security policies.
System viewer	Has permissions to query information and change the password of a user. NOTE: A system viewer only has the permission to view administrators and does not have the permission to view security administrators.
Security administrator	Has system security configuration permissions, including security policy configuration, access control, certificate management, and time configuration. NOTE: A security administrator has only the permission to view security-related configurations and does not have the permission to view other configurations.
SAN resource administrator	Has permissions to view block resource pools. NOTE: A SAN resource administrator has the permission to view security policies.
Machine-machine account	Has all permissions except session management and access control. NOTE: A machine-machine account has the permission to view security policies.