Hitachi

JP1 Version 12 JP1/Performance Management Planning and Configuration Guide


4.4.9 Enhancing file permissions

When using Performance Management in a Windows environment, you can modify user file permissions to enhance security.

You enhance file permissions by modifying folder permissions. When you set permissions on a parent folder, subfolders in the folder inherit these permissions.

Create a PFM users group, and assign the permissions from Modify downwards to the group. Once these permissions have been assigned, only users who belong to the PFM users group will be able to execute PFM commands that could be executed previously by users with general user permission. Modify the permissions for the folder installation-folder\jp1pc\ as shown in the following table.

Table 4‒30: Folder permissions

Permission

Access permissions

Administrators

SYSTEM

Backup Operators

PFM Users

(specific users)

Full control

Y

Y

N

N

Modify

Y

Y

Y

Y

Read & execute

Y

Y

Y

Y

List folder contents

Y

Y

Y

Y

Read

Y

Y

Y

Y

Write

Y

Y

Y

Y

Legend:

Y: Assign permission

N: Do not assign permission

When using Performance Management in a logical host environment, we recommend that you configure the PFM users group as a domain group account. For users in a non-domain environment, assign the permissions in the above table to the PFM users group created on each of those users' machines.