< Previous  | TOC | Index | Next  >

User privileges on clustered management servers

Consider the following scenario:

• Your console installation has a clustered management server. In this environment, the CMC_MS service group is running on a node in the cluster.
• You are logged in to the console using the local Administrator or root account on the cluster node where CMC_MS is running. Call this account root@ms1. This user is considered a VCSMC administrator (management server user with administrator privilege).
• You are using the console to configure clusters for management using the Discover/Add Clusters task.

As you add clusters, you have the option of adding only the currently logged-in VCSMC administrator as a cluster administrator. You must explicitly select this option in the cluster configuration wizard.

If you want to add any other VCSMC administrators as cluster administrators, you must use the Assign User Privileges wizard. This wizard is available on the Configuration menu when you are viewing clusters or service groups.

If the CMC_MS service group fails over or is switched to another node, you can still log in on the new node using the original VCSMC administrator, root@ms1, or as any other VCSMC administrator that you might have added to a cluster using the Assign User Privileges wizard.

The situation is different for CLI operations because of the following:

• You can run the galogin command successfully only on the cluster node where the CMC_MS service group is online.
• The galogin command succeeds only if the domain name used is also the name of the cluster node where the CMC_MS service group is online.

Therefore, it is necessary to define the local Administrator or root user of each cluster node as a VCSMC administrator. You must then add these new VCSMC administrators as cluster administrators so that CLI commands can receive cluster administrator privilege.

For clusters configured with the cc_configure.sh tool, no mechanism exists to grant cluster privileges to a VCSMC administrator. You must explicitly grant cluster administrator privilege to VCSMC administrators for all nodes in the cluster using the Assign User Privileges wizard.