Navisphere Command Line Interface (CLI) Reference - VMware Communities

Domain and Security CommandsAbout domains and user accountsA domain is a group of one or more storage systems with StorageManagement Server software whose SPs are connected to a networkand which have been assigned to the domain by Navisphere CLI orNavisphere Manager. Each domain has a master node (masterstorage system) that maintains the master copy of the domain data —the storage systems and global user accounts that make up thedomain.Setting up a domain allows a group of storage systems to bemonitored and managed using a single login. Even if you plan to usea storage system by itself (manage it separately), we suggest that youcreate a domain for that system.Note: When you set up a user account, you assign a scope of either global,local, or LDAP. Global user accounts apply to all storage systems within adomain. Local user accounts apply to a specific storage system. LDAP usesan external server to authenticate accounts for an entire domain.Navisphere Manager CLI versions 6.24 and later support lightweightdirectory access protocol (LDAP). This requires an active andoperational LDAP environment to which you can connectNavisphere security for the purpose of sharing user accounts andauthenticating usernames and passwords.Administrators can manage accounts in a centralized directoryaccessible to multiple applications. Users can use their LDAPcredentials to log in and perform Manager and CLI operations.Note: In order to issue domain CLI commands, you must have globaladministrator privileges.A user (that is, someone who needs to view or manage storagesystem operations) can have one of three roles:◆◆◆AdministratorManagerMonitor420 EMC Navisphere Command Line Interface (CLI) Reference