Job Management Partner 1/Performance Management Planning and Configuration Guide

5.4.8 Enhancing file permissions

When using Performance Management in a Windows environment, you can modify user file permissions to enhance security.

You enhance file permissions by modifying folder permissions. When you set permissions on a parent folder, subfolders in the folder inherit these permissions.

Create a PFM users group, and assign the permissions from Modify downwards to the group. After these permissions are assigned, only users who belong to the PFM users group will be able to execute PFM commands that could previously be executed by anyone. Modify the permissions for the folder installation-folder\jp1pc as shown in the following table.

Table 5-25 Folder permissions

Permission	Access permissions
	Administrators	SYSTEM	Backup Operators	PFM Users (specific users)
Full control	Y	Y	N	N
Modify	Y	Y	Y	Y
Read & execute	Y	Y	Y	Y
List folder contents	Y	Y	Y	Y
Read	Y	Y	Y	Y
Write	Y	Y	Y	Y

Legend:

Y: Assign permission

N: Do not assign permission

When using Performance Management in a logical host environment, Hitachi recommends that you configure the PFM users group as a domain group account. For users in a non-domain environment, assign the permissions in the above table to the PFM users group created on each of those users' machines.

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, Hitachi, Ltd.