Managing resource roles

Assigning resource role to other users is reserved for the administrator user from the organization that is registered for IBM® Cloud Management Console for Power Systems™ services.

If you have a valid ID and you are registered as the administrator user for your organization in the IBM Cloud Management Console for Power Systems portal, you can add, modify, delete resource role of other users.

You can manage resource roles from the Settings page. To view the Settings page, click the navigation menu icon () in the portal header, and then click the Settings icon (). In the Settings page, click the Users and Security > Manage Resource Roles tab to view all resource roles.

Resource role is a role that is created for a user by the administrator user, to access a specific set of resources. If this role is assigned to a user by the admin, the user can access only that specific set of resources. The default Admin resource role has access to all the resources. If the user is an administrator, only the Admin resource role can be assigned. No other role can be assigned to the administrator user.

To add a resource role, click Add Resource Role +. In the Add Resource Role window, enter a valid and unique name and select resources from the resource tree. Either you can select resources based on existing resource roles or choose all resources that are available. To select resources based on existing resource roles, select a resource role from the drop-down list. To assign only managed system to a resource role, you can select a managed system. Partitions are assigned separately. Partitions and Virtual I/O Servers could be assigned to resource role individually or all by selecting ‘All Partitions’ and ‘All VIOS’ check box. If you select the ‘All Partitions’ and ‘All VIOS’ check box, all current and future partitions and Virtual I/O Servers of that managed system are assigned to the role. In the Resource tree pane, there are two nodes Live Data and Stale Data. Live data contains data available and stale data are those data which do not exist anymore, that is, migrated or deleted or no more managed by CMC.

To edit a resource role, in the Actions column, click Edit corresponding to the resource role that you want to edit. In the Edit Resource Role page, the selected resources in the resource tree pane are the resources that are currently assigned to this role. You can change the already assigned resources or add new resources. To change existing resources for the role, clear the check box and select the check box corresponding to the resources that you want to add and click Save.

To delete a resource role, in the Actions column, click Delete corresponding to the resource role that you want to delete. In the Delete Resource Role page, enter the Resource Role name that you want to delete.  Select the check box “I understand the consequences of deleting this role” and click on Confirm. 

Notes: 

• The resource role that you enter must match the existing resource role or else an error message is displayed; “Typed name should match with role name”.  
• A resource role can be deleted only if it is not associated with any user, else the option is disabled for that resource role.

To rename a resource role, in the Actions columns, click Rename corresponding to the resource role that you want to rename. Enter a unique name for the resource role and click Save.

To search and select, enter text in the search field and click on Search icon ( ) and press enter. The table displays all resource roles that match your search criteria. Click on (+) icon next to the search result to display only the selected result in the table.