Action privileges for user roles

The following tables list the user action privileges associated with each user role.

The Use privilege is a special case that allows you to associate objects to objects that you own but you are not allowed to change. For example, in a logical interconnect group, a user assigned the role of Server administrator is not allowed to define logical interconnect groups, but can use them when adding an enclosure.

Action privileges for user roles
Category

Action privileges for user roles

IA=Infrastructure administrator, admin=administrator

(C=Create, R=Read, U=Update, D=Delete, Use)

IA Server admin Network admin Backup admin Storage admin Software admin

activities

CRUD

CRU

CRU

R

CRU

CRU

alerts

RUD

RUD

RUD

RUD

RUD

appliance

CRUD

R

R

R

R

R

audit logs

CR

R

R

R

backups

CRUD

R

R

CRD

R

R

certificates

CRUD

community string

RU

R

CRU

R

R

connections

CRUD

R

CR

R

R

R

connection templates

CRUD, Use

R, Use

CRUD

R

R

R

console users

CRUD

data centers

CRUD

CRUD

R

R

R

R

debug logs

CRUD

CRU

CRU

R

CRU

device bays

CRUD

CRUD

R

R

R

R

domains

CRUD

R

CRU

R

R

R

enclosures

CRUD

CRUD

R

R

R

R

enclosure groups

CRUD, Use

CRUD, Use

R

R

R

R

Ethernet networks

CRUD

R

CRUD

R

R

R

events

CRU

CRU

CRU

R

CRU

fabrics

RUD1

R

RUD

R

R

R

FC aliases

CRUD

R

R

R

CRUD

R

FC device managers

CRUD

R

R

R

CRUD

R

FC endpoints

R

R

R

R

R

R

FC networks

CRUD

R

CRUD

R

R

R

FCOE networks

CRUD, Use

R

CRUD, Use

R

R

R

FC ports

R

R

R

R

R

R

FC providers

R

R

R

R

R

R

FC SANs

CRUD

R

R

R

CRUD

R

FC SAN services

CRUD

R

R

R

CRUD

R

FC switches

R

R

R

R

R

R

FC tasks

R

R

R

R

R

R

FC zones

CRUD

R

R

R

CRUD

R

firmware drivers

CRUD

CRUD

CRUD

R

R

R

global settings

CRUD

CRUD

CRUD

R

CRUD

CRUD

grouptorole mappings

CRUD

R

hosts

CRUD

R

R

R

R

host clusters

CRUD

R

R

R

R

ID range ipv4

CRUD

RU

CRUD

R

R

R

ID range ipv4 subnet

CRUD

RU

CRUD

R

R

R

ID range vmacs (MAC addresses)

CRUD

R

CRU

R

R

R

ID range vsns (serial numbers)

CRUD

CRU

R

R

R

R

ID range vwwns (World Wide Names)

CRUD

R

CRU

R

R

R

infrastructure vms

CRUD

CRUD

R

R

R

R

integrated tools

CRUD

R

R

R

R

R

interconnects

CRUD

CR

CRUD

R

R

R

interconnect types

R, Use

R

CRUD

R

R

R

labels

CRUD

CRUD

CRUD

R

CRUD

CRUD

licenses

CRUD

CR

R

R

R

R

logical downlinks

R

R

R

R

R

R

logical enclosures

CRUD, Use

CRUD, Use

R, Use

R

R, Use

R, Use

logical interconnects

RU, Use

R, Use

RU, Use

R

R

R

logical interconnects groups

CRUD, Use

R, Use

CRUD, Use

R

R

R

logical switches

login domains

CRUD

R

R

login sessions

CRUD

RU

RU

RU

RU

managed SANs

CRUD, Use

R

R, Use

R

CRUD, Use

migratable VC domains

CRUD, Use

R

networks

CRUD, Use

R, Use

CRUD, Use

R

R

network sets

CRUD, Use

CRUD2

CRUD

R

R

R

notifications

CRUD

CRD

CRD

R

R

organizations

CRUD

R

ports

RU, Use

RU, Use

R

R

power devices

CRUD

CRUD

R

R

R

R

racks

CRUD

CRUD

R

R

R

R

reports

R

R

R

R

R

R

repository manager

CRUD

CRUD

CRUD

R

R

R

restores

CRUD

roles

CRUD

SANS

CRUD, Use

R

R

R

CRUD, Use

SAN manager

CRUD, Use

R

R

R

CRUD, Use

scopes

CRUD, Use

R

R

R

R

R

server hardware

CRUD, Use

CRUD, Use

R

R

R

R

server hardware types

CRUD, Use

CRUD, Use

R

R

R

R

server profiles

CRUD

CRUD

R

R

R

R

server profile templates

CRUD, Use

CRUD, Use

R

R

R

storage pools

RU

R

R

R

RU

R

storage systems

CRUD

R

R

R

CRUD

R

storage target ports

CRUD

R

R

R

CRUD

R

storage volumes

CRUD

CRUD

R

R

CRUD

R

storage volume attachments

CRUD

CRUD

R

R

CRUD

R

storage volumes templates

CRUD

R

R

R

CRUD

R

storage volume sets

R

R

R

R

R

R

support

CRUD, Use

R, Use

R

R

R, Use

R, Use

switches

CRUD, Use

RU

CRUD

R

R

R

tasks

R

R

R

R

R

R

trap forwarding

RU

R

R

R

R

R

unmanaged devices

CRUD

CRUD

R

R

R

R

update

R

uplink sets

CRUD

R

CRUD

R

R

R

users

CRUD

user preferences

CRUD

1

Fabric is claimed when HPE OneView and HPE Composable Fabric Manager are configured together.

2

Server administrators cannot edit bandwidths.

Action privileges for specialized user roles
Category

Action privileges for specialized user roles

IA=Infrastructure administrator, admin=administrator

(C=Create, R=Read, U=Update, D=Delete, Use)

Read only Scope admin Scope operator Server firmware operator Server profile architect Server profile admin Server profile operator
activities

R

R

R

R

R

R

R

alerts

R

R

R

R

R

R

R

appliance

R

R

R

R

R

R

R

audit logs

backups

R

R

R

R

R

R

R

certificates

R

R

R

R

R

R

R

community string

connections

R

R

R

R

R

R

R

connection templates

R

R

R

R

R

R

R

console users

data centers

R

R

R

R

R

R

R

debug logs

R

R

R

R

R

R

R

device bays

R

R

R

R

R

R

R

domains

R

R

R

R

R

R

R

enclosures

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

enclosure groups

R

R, Use

R

R

R

R, Use

R, Use

enclosure types              
Ethernet networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

events

R

R

R

R

R

R

R

fabrics

R

R

R

R

R

R

R

FC aliases

R

R

R

R

R

R

R

FC device managers

R

R

R

R

R

R

R

FC endpoints

R

R

R

R

R

R

R

FC networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

FCOE networks

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

FC ports

R

R

R

R

R

R

R

FC providers

R

R

R

R

R

R

R

FC SANs

R

R

R

R

R

R

R

FC SAN services

R

R

R

R

R

R

R

FC switches

R

R

R

R

R

R

R

FC tasks

R

R

R

R

R

R

R

FC zones

R

R

R

R

R

R

R

firmware drivers

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

global settings

R

R

R

R

R

R

R

grouptorole mappings

R

R

R

R

R

R

R

hosts

R

R

R

R

R

R

R

ID range vmacs (MAC addresses)

R

R

R

R

R

R

R

ID range vsns (serial numbers)

R

R

R

R

R

R

R

ID range vwwn (World Wide Names)

R

R

R

R

R

R

R

infrastructure vms

R

R

R

R

R

R

R

integrated tools

R

R

R

R

R

R

R

interconnects

R

R, Use

R, Use

R

R

R

R

interconnect types

R

R

R

R

R

R

R

labels

R

R

R

R

CRUD

CRUD

CRUD

licenses

R

R

R

R

R

R

R

logical downlinks

R

R

R

R

R

R

R

logical enclosures

R

R, Use

R, Use

R

R

R

R

logical interconnects

R

R, Use

R, Use

R

R

R

R

logical interconnect groups

R

R, Use

R, Use

R

R, Use

R, Use

R

logical switch groups

R

R, Use

R, Use

R

R

R

R

logical switches

R

R, Use

R, Use

R

R

R

R

login domains

R

R

R

R

R

R

R

login sessions

RU

R

R

R

RU

RU

RU

managed SANs

R

R

R

R

R

migratable VC domains

networks

R

R

R

R

R

R

R

network sets

R

R, Use

R, Use

R

CRUD, Use

CRUD, Use

R, Use

notifications

R

R

R

R

R

R

R

organizations

R

R

R

R

R

R

R

ports

R

 

power devices

R

R

R

R

R

R

R

racks

R

R

R

RU, Use

R

R

R

reports

R

R

R

R

R

R

R

repository manager

R

R

R

R

R

R

restores

R

R

R

R

R

R

R

roles

R

R

R

R

R

R

R

SANs

R

R

R

R

R

SAN manager

R

R

R

R

R

scopes

R

CRUD

RU

R

R

R

R

server hardware

R

R, Use

R, Use

RU, Use

RU, Use

RU, Use

RU, Use

server hardware types

R

R

R

R

R

R

R

server profiles

R

R, Use

R, Use

RU1

CRUD

CRUD

RU, Use

server profile templates

R

R

R

R

CRUD, Use

R, Use

R

storage pools

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

storage systems

R

R

R

R

R

R

R

storage target ports

R

R

R

R

R

R

R

storage volumes

R

R, Use

R, Use

R

CRUD, Use

CRUD, Use

R, Use

storage volume attachments

R

R

R

R

R

R

R

storage volume templates

R

R, Use

R, Use

R

R, Use

R, Use

R, Use

support

R

R

R

R

R

R

switches

R

R, Use

R, Use

R

R

R

R

switch domains

R

R

R

R

R

R

switch groups

R

R

R

R

R

R

R

tasks

R

R

R

R

R

R

R

trap forwarding

R

R

R

R

R

R

R

unmanaged devices

R

R

R

R

R

R

R

update

R

R

R

R

R

R

uplink sets

R

R

R

R

R

R

R

users

R

R

R

R

R

R

user preferences

R

R

R

R

R

R

1

Server firmware operator can only update manageFirmware, firmwareBaseline, forceInstallFirmware, firmwareInstallType, firmwareActivationType and serverHardwareUri attributes.