Go to main content

Oracle® ZFS Storage Appliance Administration Guide, Release OS8.7.x

Exit Print View

Updated: November 2018
 
 

Understanding Users and Roles

A user can be one of the following types:

Administrator User Type
Non-Administrator User Type
Local - A locally defined appliance administrator; can be granted privileges by assigning custom roles; can optionally have a UID specified. Although local users are supported for data services, local groups are not supported.
Data-only - A data-only user defined locally for data (SMB, NFS, FTP, etc.) with no administrator access; can optionally have a UID specified.
Directory - An appliance administrator managed by a directory service (NIS or LDAP); can be granted privileges by assigning custom roles.
No-login - A username and UID reserved for identity mapping purposes. This user type is not allowed to log in to the appliance and can optionally have a UID specified.

Local and Directory users are administrator types, and can be granted privileges by assigning custom roles.

A role is a collection of privileges that can be assigned to an administrator user type. Newly created administrator users default to the "basic" role, which enables logging in to the administrative interface, but does not allow changes. All administrator users can read most system configuration parameters, and any role can be edited to add or delete authorizations.

The use of roles is more secure than giving everyone the root password. Roles restrict users to necessary authorizations only, and also attribute their actions to their individual username in the log. For example, you can create administrator and operator roles, with different authorization levels. Staff members can be assigned any role that is suitable for their needs, without assigning unnecessary privileges.

Related Topics

  • Adding an Administrator or User BUI, CLI

  • Changing a User Password BUI, CLI

  • Editing Exceptions for a User BUI, CLI

  • Deleting Exceptions for a User BUI, CLI

  • Adding a Role BUI, CLI

  • Editing Authorizations for a Role BUI, CLI

  • Deleting Authorizations from a Role BUI, CLI

  • Adding a User Who can Only View the Dashboard BUI