Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Search for | Example | Results |
---|---|---|
A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Search for | Operator | Example |
---|---|---|
Two or more words in the same topic |
|
|
Either word in a topic |
|
|
Topics that do not contain a specific word or phrase |
|
|
Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
A combination of search types | ( ) parentheses |
|
- User and user group setup and security
- SA users and user groups
- Managing users
- Managing user groups
- Setting permissions on user groups
- Setting password, account, and session security policies
- Managing super administrators
- Managing customer administrators and customer groups
- Authenticating with an external LDAP directory service
- SA Common Access Card (CAC) and Personal Identity Verification (PIV) Smart Card integration
- SA/RSA SecurID® integration
- Configuring SA/SecurID integration
- User and Security Reports
Managing customer administrators and customer groups
One way to organize your servers and provide access control boundaries is to organize your managed servers by customer. A customer represents a set of servers associated with a business organization, such as a division or a company. Typically a server is associated with a customer because it runs applications for that customer. For more information on creating and managing customers, see the SA 10.50 User Guide.
You can delegate super administrator tasks to a customer administrator. A customer administrator manages the users who manage the servers assigned to a customer. A customer administrator is a super administrator with access only to certain user groups.
You create customer administrators by creating customer groups and assigning customers and users to the customer group. For more information, see Customer administrators and Customer groups.
- Viewing all customer administrators
- Creating a customer administrator from the customer group view
- Viewing all customer administrators for a customer group
- Viewing all customers for a customer group
- Creating a customer group
- Deleting a customer group
- Creating a customer administrator from the user view
- Deleting a customer administrator from the customer group view
- Deleting a customer administrator from the user view
- Specifying password character requirements
Viewing all customer administrators
A customer administrator is a user listed in a customer group. To view all SA customer administrators:
- In the SA Client, select the Administration tab in the navigation pane.
- Open the Users and Groups node in the navigation pane. This displays the Super Administrators node.
- Select the Super Administrators node. This displays all your super administrators and customer administrators. You can distinguish the two types of administrators by the icon as shown below:
Customer Administrator icon
Super Administrator icon
Creating a customer administrator from the customer group view
An SA customer administrator is an SA user who can modify certain user groups. To create an SA customer administrator, add an SA user to a customer group:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
- Select a customer group. See Creating a customer group.
- Select the Actions > Open menu or right-click and select Open. This opens the customer group in a separate window.
- Select the Users view. This displays all the SA users who are members of that customer group.
- Select the “+” icon or the Actions > Add menu. This displays all your SA users. See Creating a new user.
- Select one or more users that you want to make customer administrators and press Select.
- Select File > Save.
- Select File > Close.
This allows the new customer administrator to modify the user groups with resource permissions to the customer.
Viewing all customer administrators for a customer group
A customer administrator is a user listed in a customer group. To view all SA customer administrators for a customer group:
- In the SA Client, select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your customer groups.
- Select a customer group.
- Select the Users view. This displays all the users who are members of the customer group. These users are customer administrators for the customers listed in the customer group.
Viewing all customers for a customer group
A customer administrator is a user listed in a customer group. To view all customers in a customer group, perform the following steps:
- In the SA Client, select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your customer groups.
- Select a customer group.
- Select the Customers view. This displays all the customers who are members of the customer group.
Creating a customer group
A customer group associates one or more users with one or more customers and makes those users customer administrators. An SA customer administrator is an SA user who can modify all the user groups that have access to that customer. To create an SA customer administrator, you must create a customer group:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
- Select the Actions > Add menu or select the New Item icon.
- Enter the name and a description of the customer group.
- Select the Customers view.
- Select the “+” icon or the Actions > Add menu. This displays all your customers.
- Select one or more customers and press Select.
- Select the Users view.
- Select the “+” icon or the Actions > Add menu. This displays all your SA users.
- Select one or more users that you want to add to the customer group and press Select.
- Select File > Save.
- Select File > Close.
Deleting a customer group
A customer group associates one or more users with one or more customers and makes those users customer administrators. An SA customer administrator is an SA user who can modify certain user groups. To delete a customer group:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
- Select the customer group you want to delete.
- Select the “X” icon or the Actions > Delete menu or right-click and select Delete or press the Delete key on your keyboard. This removes the selected customer groups.
Creating a customer administrator from the user view
An SA customer administrator is an SA user who can modify certain user groups. To create an SA customer administrator, add an SA user to a customer group:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Users node. This displays all your existing SA users.
- Select a user. See Creating a new user.
- Select the Actions > Open menu, or right-click and select Open. This opens the user in a separate window.
- Select the Customer Groups view. This displays all the customer groups the user belongs to.
- Select the “+” icon or the Actions > Add menu. This displays all your customer groups. See Creating a customer group.
- Select one or more customer groups, and press Select.
- Select File > Save.
- Select File > Close.
This allows the new customer administrator to modify the user groups with resource permissions to the customer.
Deleting a customer administrator from the customer group view
An SA customer administrator is an SA user who can modify certain user groups. To delete an SA customer administrator, remove that SA user from the customer groups to which the user belongs. Perform the following steps:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
- Select a customer group.
- Select the Actions > Open menu, or right-click and select Open. This opens the customer group in a separate window.
- Select the Users view. This displays all the SA users who are members of that customer group.
- Select one or more users that you want to delete from the customer group, then select the “–” icon or the Actions > Remove menu, right-click and select Remove, or press the Delete key on your keyboard. This removes the selected SA users from the customer group so they are no longer customer administrators. The users are still valid SA users, however.
- Select File > Save.
- Select File > Close.
Deleting a customer administrator from the user view
An SA customer administrator is an SA user who can modify certain user groups. To delete an SA customer administrator, remove that SA user from the customer groups to which the user belongs:
- Log in to the SA Client as a super administrator, such as admin.
- Select the Administration tab in the navigation pane.
- Under the Users and Groups node in the navigation pane, select the Users node. This displays all your existing SA users.
- Select a user.
- Select the Actions > Open menu, or right-click and select Open. This opens the user in a separate window.
- Select the Customer Groups view. This displays all the customer groups to which the user belongs.
- Select one or more customer groups from which you want to remove the user, then select the “–” icon; the Actions > Remove menu, right-click and select Remove, or press the Delete key on your keyboard. This removes the user from the customer groups.
- Select File > Save.
- Select File > Close.
Specifying password character requirements
To specify character requirements for SA user passwords:
- Select the Administration tab in the SA Client.
- In the navigation pane select System Configuration > Configuration Parameters. This displays the SA components, facilities, and realms that have system configuration parameters.
- In the list of SA components, select Server Automation System Web Client (OCC). This displays the system configuration parameters for this component.
- Locate the parameter owm.features.MiniPasswordPolicy.allow, and set it to true.
This parameter must be true for the other password parameters on this page to take effect. To disable the other password parameters, set owm.features.MiniPasswordPolicy.allow to false.
- Set the values for the password parameters listed in the following table.
- Select Revert to discard your changes, or Save to save your changes.
- To apply these parameter changes to other cores in a multimaster mesh, you must restart the other cores. For instructions, see SA Start/Stop script.
Password Requirement |
Parameter |
Allowed Values |
Default Value |
---|---|---|---|
Maximum number of repeating, consecutive characters |
owm.pwpolicy.maxRepeats |
Must be greater than 0 |
2 |
Minimum number of characters |
owm.pwpolicy.minChars |
Positive integer |
6 |
Minimum number of non-alphabetic characters |
owm.pwpolicy. |
Must be less than the value of owm.pwpolicy.minChars |
0 |
We welcome your comments!
To open the configured email client on this computer, open an email window.
Otherwise, copy the information below to a web mail client, and send this email to hpe_sa_docs@hpe.com.
Help Topic ID:
Product:
Topic Title:
Feedback: