Users

When you create a new user, you assign the user to one of the default user groups or to a custom user group. User groups are associated with a predefined role.

You can assign the following roles to your user groups:

Security Administrator: Users can manage all functions of the system, including managing users, user groups, and user authentication. Security-administrator-role users can run any system commands from the command-line interface (CLI). However, they cannot run the sainfo and satask commands from the CLI. Only the superuser ID can run sainfo and satask commands.
Administrator: Users can manage all functions of the system except those functions that manage users, user groups, and authentication. Administrator-role users can run the system commands that the security-administrator-role users can run from the CLI except for commands that deal with users, user groups, and authentication.
Restricted Administrator: Users can perform the same tasks and run most of the same commands as administrator-role users. However, users with the Restricted Administrator role cannot remove volumes, host mappings, hosts, or pools. Support personnel can be assigned this role to help resolve errors and fix problems.
Copy Operator: Users can start and stop all existing FlashCopy®, Metro Mirror, and Global Mirror relationships. Copy-operator-role users can run the system commands that administrator-role users can run that deal with FlashCopy, Metro Mirror, and Global Mirror relationships.
Monitor: Users have access to all system viewing actions. Monitor-role users cannot change the state of the system nor change the resources that the system manages. Monitor-role users can access all information-related GUI functions and commands, back up configuration data, and change their own passwords.
Service: Users can set the time and date on the system, delete dump files, add and delete nodes,apply service, and shut down the system. Users can also complete the same tasks as users in the monitor role.
VASA Provider: Users with this role can manage VMware vSphere Virtual Volumes.