In order to enable remote cluster operations you must configure a VCS user with the same name and privileges in each cluster.
When assigning privileges in secure clusters, you must specify fully-qualified user names, in the format username@domain. You cannot assign or change passwords for users when VCS is running in secure mode.
You must assign service group rights to the application service group as well as any dependent service groups except for the RVG service group.
See the Cluster Server Administrator's Guide.
To assign user privileges at the primary site
haconf -makerw
hauser -add user [-priv <Administrator|Operator>]
hauser -add user [-priv <Administrator|Operator> [-group service_groups]]
haconf -dump -makero