Individual task roles with access to specific resources if not created and restricted, will allow unrestricted access to system functions. The following is an example of some managed resource categories: Tasks are functions that a user can perform, and the managed resource role defines where those tasks might be carried out. The Access Administrator assigns a user ID and user roles to each user of the Hardware Management Console. <br /><br />• OPERATOR OPERATOR <br />• ADVANCED ADVANCED OPERATOR<br />• ACSADMIN ACCESS ADMINISTRTOR<br />• SYSPROG SYSTEM PROGRAMMER<br />• SERVICE SRVICE REPRESENTATIVE<br />Failure to establish this environment may lead to uncontrolled access to system resources.<br />
Have the System Administrator display the user profiles and demonstrate that valid users are defined to valid roles and that authorities are restricted to the site list of users.<br /><br />Note: Sites must have a list of valid HMC users, indicating their USER IDs, Date of DD2875, and roles and responsibilities.<br /><br />To display user roles chose User Profiles and then select the user for modification. View Task Roles and Manager Resources Roles.<br /><br />If the different roles are not properly displayed or are not properly restricted, then this is a FINDING.<br />
The System Administrator must set up a list of Users<br /><br />Note: Sites must have a list of valid HMC users, indicating their USER IDs, Date of DD2875, and roles and responsibilities <br />and these must match the users defined to the HMC.<br /><br />To display user roles chose User Profiles and then select the user for modification. View Task Roles and Manager Resources Roles.<br /><br />