Working with local and remote users

You can create two categories of users that access the system. These types are based on how the users are authenticated to the system. Local users must provide the username and password, and if you require command line access without entering a password, a Secure Shell (SSH) key - or both. Local users are authenticated through the authentication methods that are located on the Lenovo Storage V series system.

If the local user needs access to management GUI, a password is needed for the user. Access to the command-line interface (CLI) is also possible with the same password or (alternatively) a valid SSH key can be used. An SSH password is required if a user is working with both interfaces. User groups define roles that authorize the users within that group to a specific set of operations on the system.

Local users must be part of a user group that is defined on the system.

A remote user is authenticated on a remote service usually provided by a SAN management application, such as Spectrum Control, and does not need local authentication methods. For a remote user, a password (preferred) is required, and if you require command line access without entering a password an SSH key is required to use the command-line interface.

Remote users only need local credentials to access the management GUI if the remote service is down. The user groups a remote user is a member of are defined by the remote authentication service. To define a remote user, create an user group on the local machine that is also defined on the remote authentication service.