1. A computer-implemented method, comprising: generating, at a first host executing a storage-management application, an authorization setting indicating those provisioning operations, if any, that a user is permitted to perform on a data storage entity of a storage system; and communicating the authorization setting from the first host to the storage system so that the storage system may provide the authorization setting to a storage-management application executing on any host, to include the first host, when a user initiates a request to perform a provisioning operation on the data storage entity via the storage-management application.