158 Implementing the IBM Storwize V7000 with IBM Spectrum Virtualize V8.2.1
The Access menu is available from the left pane, as shown in Figure 5-47.
Figure 5-47   Access menu
5.9.1  Users
You can create local users who can access the system. These user types are defined based 
on the administrative privileges that they have on the system.
Local users must provide a password, Secure Shell (SSH) key, or both. Local users are 
authenticated through the authentication methods that are configured on the system. If the 
local user needs access to the management GUI, a password is needed for the user. If the 
user requires access to the CLI through SSH, a password or a valid SSH key file is necessary. 
Local users must be part of a user group that is defined on the system. User groups define 
roles that authorize the users within that group to a specific set of operations on the system.
To define your User Group in the IBM Storwize V7000, click Access → Users, as shown in 
Figure 5-48.
Figure 5-48   Defining User Group in Storwize V7000
The following privilege User group roles exist in the IBM Spectrum Virtualize:
/SM590000Security Administrator: Manages all functions of the systems, except tasks that are 
associated with commands satask and sainfo.
/SM590000Administrator: Has full rights in the system, except those commands that are related to 
user management and authentication.
/SM590000Restricted Administrator: Has the same rights as Administrators, except removing 
volumes, host mappings, hosts, or pools. This option is ideal for support personnel.
/SM590000Copy Operators: Can start, stop, or pause any FlashCopy-based operations.