DEE-1111 Exam Dumps : Expert - PowerMax and VMAX All Flash Solutions

Unisphere for PowerMax and Solutions Enabler have different ways of managing user permissions. Unisphere has a more explicit authentication mechanism for users, where each user must have a username and password to log in to the Unisphere interface. Unisphere also supports role-based access control (RBAC), where each user can be assigned one or more roles that define their level of access to the storage system resources and operations. Unisphere maintains the user and role information in a symauth database, which can be shared with Solutions Enabler. Solutions Enabler, on the other hand, uses the operating system user credentials to authenticate users. Solutions Enabler does not require users to have a username and password to run commands, but it checks the symauth database to verify if the user has the appropriate role to perform the requested operation. Solutions Enabler also supports RBAC, where each user can be assigned up to four roles that define their level of access to the storage system resources and operations.

References:

• Unisphere for PowerMax User Management
• Solutions Enabler User Management

 The symrdf split command is used to suspend SRDF/A replication and make both R1 and R2 devices read/write enabled. This is useful for testing purposes or for creating point-in-time copies of data on both sides. The symrdf establish command can be used to resume SRDF/A replication after a split operation. The exhibit shows that both R1 and R2 devices are read/write enabled and have a Split status, which indicates that a symrdf split command was issued next2

The symauth command is used to manage user authorization for SYMCLI commands. The exhibit shows the output of the symauth -list command, which displays the user groups and access types defined for SYMCLI commands. The output shows that there are two user groups: AdminGrp and EmcMgmtGrp. The AdminGrp group has ADMINRD access type, which means that users in this group can run any SYMCLI command with read-only access. The EmcMgmtGrp group has BASECONTROL access type, which means that users in this group can run only a subset of SYMCLI commands with read/write access. Therefore, the correct description of a possible configuration created by SYMACL is hosts that are part of AdminGrp group2