Jump to main content

# View authorization rules

Users gain access to a storage system or component either directly through a role assignment and/or indirectly through membership in a user group that has a role assignment.

## Steps

1. Select to open the Settings panel.
2. Select Users and Groups > Authorized Users & Groups.

## Next steps

Use the Authorized Users & Groups list view to view and manage authorization rules.

The following properties display:

- Name—User or group name
- Authority—Authentication authority - possible values are:
  - Local Directory—Directory of users and encrypted passwords that are stored in a CST .xml file (users only, no groups)
  - Windows OS—Local Windows users and groups
  - Windows AD—Windows Active Directory users and groups that are accessed through the SMAS server's domain.
  - LDAP-SSL—Users and groups on LDAP server that have been configured using the Configure Authorization wizard.
  - Unsupported—Not supported
- Authentication Domain—Domain name - possible values are based on the authentication authority:

  Authority | Domain name
  --- | ---
  Local directory Windows OS | Unisphere server hostname
  Windows AD | Unisphere server domain
  LDAP-SSL | LDAP server domain
  Virtualization domain | Virtualization domain
  Any authority | Any

The following controls are available:

- Create— Add authorization rules
- Remove—Remove authorization rules
- Modify— Edit authorization rules