Action privileges for user roles

The following tables list the user action privileges associated with each user role.

The Use privilege is a special case that allows you to associate objects to objects that you own but you are not allowed to change. For example, in a logical interconnect group, a user assigned the role of Server administrator is not allowed to define logical interconnect groups, but can use them when adding an enclosure.

Table 63: Action privileges for user roles
Category

Action privileges for user roles

IA=Infrastructure administrator, admin=administrator

(C=Create, R=Read, U=Update, D=Delete, Use)

IA Server admin Network admin Backup admin Storage admin Software admin

activities

CRUD

CRU

CRU

R

CRU

CRU

alerts

RUD

RUD

RUD

RUD

RUD

appliance

CRUD

R

R

R

R

R

audit logs

CR

R

R

R

backups

CRUD

R

R

CRD

R

R

certificates

CRUD

community string

RU

R

CRU

R

R

connections

CRUD

R

CR

R

R

R

connection templates

CRUD, Use

R, Use

CRUD

R

R

R

console users

CRUD

data centers

CRUD

CRUD

R

R

R

R

debug logs

CRUD

CRU

CRU

R

CRU

device bays

CRUD

CRUD

R

R

R

R

domains

CRUD

R

CRU

R

R

R

enclosures

CRUD

CRUD

R

R

R

R

enclosure groups

CRUD, Use

CRUD, Use

R

R

R

R

Ethernet networks

CRUD

R

CRUD

R

R

R

events

CRU

CRU

CRU

R

CRU

fabrics

CRUD

R

CRUD

R

R

R

FC aliases

CRUD

R

R

R

CRUD

R

FC device managers

CRUD

R

R

R

CRUD

R

FC endpoints

R

R

R

R

R

R

FC networks

CRUD

R

CRUD

R

R

R

FCOE networks

CRUD, Use

R

CRUD, Use

R

R

R

FC ports

R

R

R

R

R

R

FC providers

R

R

R

R

R

R

FC SANs

CRUD

R

R

R

CRUD

R

FC SAN services

CRUD

R

R

R

CRUD

R

FC switches

R

R

R

R

R

R

FC tasks

R

R

R

R

R

R

FC zones

CRUD

R

R

R

CRUD

R

firmware drivers

CRUD

CRUD

CRUD

R

R

R

global settings

CRUD

CRUD

CRUD

R

CRUD

CRUD

grouptorole mappings

CRUD

R

hosts

CRUD

R

R

R

R

host clusters

CRUD

R

R

R

R

ID range ipv4

CRUD

RU

CRUD

R

R

R

ID range ipv4 subnet

CRUD

RU

CRUD

R

R

R

ID range vmacs (MAC addresses)

CRUD

R

CRU

R

R

R

ID range vsns (serial numbers)

CRUD

CRU

R

R

R

R

ID range vwwns (World Wide Names)

CRUD

R

CRU

R

R

R

infrastructure vms

CRUD

CRUD

R

R

R

R

integrated tools

CRUD

R

R

R

R

R

interconnects

CRUD

CR

CRUD

R

R

R

interconnect types

R, Use

R

CRUD

R

R

R

labels

CRUD

CRUD

CRUD

R

CRUD

CRUD

licenses

CRUD

CR

R

R

R

R

logical downlinks

R

R

R

R

R

R

logical enclosures

CRUD, Use

CRUD, Use

R, Use

R

R, Use

R, Use

logical interconnects

RU, Use

R, Use

RU, Use

R

R

R

logical interconnects groups

CRUD, Use

R, Use

CRUD, Use

R

R

R

logical switches

login domains

CRUD

R

R

login sessions

CRUD

RU

RU

RU

RU

managed SANs

CRUD, Use

R

R, Use

R

CRUD, Use

migratable VC domains

CRUD, Use

R

networks

CRUD, Use

R, Use

CRUD, Use

R

R

network sets

CRUD, Use

CRUD1

CRUD

R

R

R

notifications

CRUD

CRD

CRD

R

R

organizations

CRUD

R

ports

RU, Use

RU, Use

R

R

power devices

CRUD

CRUD

R

R

R

R

racks

CRUD

CRUD

R

R

R

R

reports

R

R

R

R

R

R

repository manager

CRUD

CRUD

CRUD

R

R

R

restores

CRUD

roles

CRUD

SANS

CRUD, Use

R

R

R

CRUD, Use

SAN manager

CRUD, Use

R

R

R

CRUD, Use

scopes

CRUD, Use

R

R

R

R

R

server hardware

CRUD, Use

CRUD, Use

R

R

R

R

server hardware types

CRUD, Use

CRUD, Use

R

R

R

R

server profiles

CRUD

CRUD

R

R

R

R

server profile templates

CRUD, Use

CRUD, Use

R

R

R

storage pools

RU

R

R

R

RU

R

storage systems

CRUD

R

R

R

CRUD

R

storage target ports

CRUD

R

R

R

CRUD

R

storage volumes

CRUD

CRUD

R

R

CRUD

R

storage volume attachments

CRUD

CRUD

R

R

CRUD

R

storage volumes templates

CRUD

R

R

R

CRUD

R

storage volume sets

R

R

R

R

R

R

support

CRUD, Use

R, Use

R

R

R, Use

R, Use

switches

CRUD, Use

RU

CRUD

R

R

R

tasks

R

R

R

R

R

R

trap forwarding

RU

R

R

R

R

R

unmanaged devices

CRUD

CRUD

R

R

R

R

update

R

uplink sets

CRUD

R

CRUD

R

R

R

users

CRUD

user preferences

CRUD

1

Server administrators cannot edit bandwidths.

Table 64: Action privileges for specialized user roles
Category

Action privileges for specialized user roles

IA=Infrastructure administrator, admin=administrator

(C=Create, R=Read, U=Update, D=Delete, Use)

Read only Scope admin Scope operator Server firmware operator Server profile architect Server profile admin Server profile operator
activities

R

R

R

R

R

R

R

alerts

R

R

R

R

R

R

R

appliance

R

R

R

R

R

R

R

audit logs

backups

R

R

R

R

R

R

R

certificates

R

R

R

R

R

R

R

community string

connections

R

R

R

R

R

R

R

connection templates

R

R

R

R

R

R

R

console users

data centers

R

R

R

R

R

R

R

debug logs

R

R

R

R

R

R

R

device bays

R

R

R

R

R

R

R

domains

R

R

R

R

R

R

R

enclosures

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

enclosure groups

R

R, Use

R

R

R

R, Use

R, Use

enclosure types              
Ethernet networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

events

R

R

R

R

R

R

R

fabrics

R

R

R

R

R

R

R

FC aliases

R

R

R

R

R

R

R

FC device managers

R

R

R

R

R

R

R

FC endpoints

R

R

R

R

R

R

R

FC networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

FCOE networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

FC ports

R

R

R

R

R

R

R

FC providers

R

R

R

R

R

R

R

FC SANs

R

R

R

R

R

R

R

FC SAN services

R

R

R

R

R

R

R

FC switches

R

R

R

R

R

R

R

FC tasks

R

R

R

R

R

R

R

FC zones

R

R

R

R

R

R

R

firmware drivers

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

global settings

R

R

R

R

R

R

R

grouptorole mappings

R

R

R

R

R

R

R

hosts

R

R

R

R

R

R

R

ID range vmacs (MAC addresses)

R

R

R

R

R

R

R

ID range vsns (serial numbers)

R

R

R

R

R

R

R

ID range vwwn (World Wide Names)

R

R

R

R

R

R

R

infrastructure vms

R

R

R

R

R

R

R

integrated tools

R

R

R

R

R

R

R

interconnects

R

R, Use

R, Use

R

R

R

R

interconnect types

R

R

R

R

R

R

R

labels

R

R

R

R

CRUD

CRUD

CRUD

licenses

R

R

R

R

R

R

R

logical downlinks

R

R

R

R

R

R

R

logical enclosures

R

R, Use

R, Use

R

R

R

R

logical interconnects

R

R, Use

R, Use

R

R

R

R

logical interconnect groups

R

R, Use

R, Use

R

R, Use

R, Use

R

logical switch groups

R

R, Use

R, Use

R

R

R

R

logical switches

R

R, Use

R, Use

R

R

R

R

login domains

R

R

R

R

R

R

R

login sessions

RU

R

R

R

RU

RU

RU

managed SANs

R

R

R

R

R

migratable VC domains

networks

R

R

R

R

R

R

R

network sets

R

R, Use

R, Use

R

CRUD, Use

CRUD, Use

R, Use

notifications

R

R

R

R

R

R

R

organizations

R

R

R

R

R

R

R

ports

R

 

power devices

R

R

R

R

R

R

R

racks

R

R

R

RU, Use

R

R

R

reports

R

R

R

R

R

R

R

repository manager

R

R

R

R

R

R

restores

R

R

R

R

R

R

R

roles

R

R

R

R

R

R

R

SANs

R

R

R

R

R

SAN manager

R

R

R

R

R

scopes

R

CRUD

RU

R

R

R

R

server hardware

R

R, Use

R, Use

RU, Use

RU, Use

RU, Use

RU, Use

server hardware types

R

R

R

R

R

R

R

server profiles

R

R, Use

R, Use

RU1

CRUD

CRUD

RU, Use

server profile templates

R

R

R

R

CRUD, Use

R, Use

R

storage pools

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

storage systems

R

R

R

R

R

R

R

storage target ports

R

R

R

R

R

R

R

storage volumes

R

R, Use

R, Use

R

CRUD, Use

CRUD, Use

R, Use

storage volume attachments

R

R

R

R

R

R

R

storage volume templates

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

support

R

R

R

R

R

R

switches

R

R, Use

R, Use

R

R

R

R

switch domains

R

R

R

R

R

R

switch groups

R

R

R

R

R

R

R

tasks

R

R

R

R

R

R

R

trap forwarding

R

R

R

R

R

R

R

unmanaged devices

R

R

R

R

R

R

R

update

R

R

R

R

R

R

uplink sets

R

R

R

R

R

R

R

users

R

R

R

R

R

R

user preferences

R

R

R

R

R

R

1

Server firmware operator can only update manageFirmware, firmwareBaseline, forceInstallFirmware, firmwareInstallType, firmwareActivationType and serverHardwareUri attributes.