content_image/992063.jpg content_image/992064.jpg
## 5.9.1 Users 

The Access  menu is available from the left pane, as shown in Figure 5-42. 

<img src='content_image/992063.jpg'>

You can create local users who can access the system. These user types are defined based on the administrative privileges that they have on the system. 

Local users must provide either a password, a Secure Shell (SSH) key, or both. Local users are authenticated through the authentication methods that are configured on the system. If the local user needs access to the management GUI, a password is needed for the user. If the user requires access to the CLI through SSH, either a password or a valid SSH key file is necessary. Local users must be part of a user group that is defined on the system. User groups define roles that authorize the users within that group to a specific set of operations on the system. 

To define your User Group in the IBM SAN Volume Controller, click Access →  Users as shown in Figure 5-43. 

<img src='content_image/992064.jpg'>

The following privilege User group roles exist in IBM Spectrum Virtualize: 

GLYPH<SM590000> Security Administrator can manage all functions of the systems except tasks associated with the commands satask  and sainfo . 

GLYPH<SM590000> Administrator has full rights in the system except those commands related to user management and authentication. 

GLYPH<SM590000> Restricted Administrator has the same rights as Administrators except removing volumes, host mappings, hosts, or pools. This is the ideal option for support personnel. 

GLYPH<SM590000> Copy Operators  can start, stop, or pause any FlashCopy-based operations. 

