HPE OneView
1827809 Members
3204 Online
109969 Solutions
New Discussion

Scope Based Access Control within the same Synergy Frame

 
SOLVED
Go to solution
jlangmead
Regular Advisor

Scope Based Access Control within the same Synergy Frame

Hi

Does SBAC allow a configuration whereby a single Synergy Frame can be managed as two separate scopes? I need to be able to ensure that I can create two environments (for example two VMware clusters of 6 compute modules each) that use different Networks, Uplinks and Server profiles etc but need to ensure that I can add a group of administrators to each scope that won't be able to make changes to the resources associated within the other scope.

Am I right in thinking that both scopes will be visible to all logged on scope administrators but will only have access to one scope and the other scope will be Read-Only access?

Is there a way that I can prevent any visibility of the other scope's configuration?

kind regards

2 REPLIES 2
ChrisLynch
HPE Pro
Solution

Re: Scope Based Access Control within the same Synergy Frame

Starting with HPE OneView 5.5, you can remove the All Resources from the UI by enabling Restrict user interface read access by scope feature.  You can change it by going to Settings -> Appliance.  You will see it listed under Global Settings.  This is a UI only enforced feature, and has no impact to API users.

I work at HPE
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo
jlangmead
Regular Advisor

Re: Scope Based Access Control within the same Synergy Frame

Great - thanks Chris