Chapter 4. Initial configuration 117
A user can log in with their short name (that is, without the domain component) or with the 
fully qualified user name in the form of an email address.
4.4.4  User groups and roles
User groups are used to determine what tasks the user is authorized to perform. Each user 
group is associated with a single role. The role for a user group cannot be changed, but user 
groups (with one of the defined roles) can be created.
The rights of a user who belongs to a specific user group are defined by the role that is 
assigned to the user group. It is the role that defines what a user can or cannot do on the 
system.
Storwize V7000 provides six user groups and seven roles by default, as listed in Table 4-1. 
The VasaProvider role is not associated with a default user group.
Table 4-1   Default user groups and roles
4.5  Configuring secure communications
During system initialization, a self-signed SSL certificate is automatically generated by the 
system to encrypt communications between the browser and the system. Self-signed 
certificates generate web browser security warnings and might not comply with organizational 
security guidelines.
Signed SSL certificates are issued by a trusted certificate authority. A browser maintains a list 
of trusted certificate authorities, identified by their root certificate. The root certificate must be 
included in this list in order for the signed certificate to be trusted. If it is not, the browser 
presents security warnings.
Note: The VasaProvider role is used to allow VMware to interact with the system when 
implementing Virtual Volumes. Avoid using this role for users who are not controlled by 
VMware.
User group Role
SecurityAdmin SecurityAdmin
Administrator Administrator
CopyOperator CopyOperator
Service Service
Monitor Monitor
RestrictedAdmin RestrictedAdmin
- VasaProvider