![]() |
|||
![]() |
![]() ![]() |
![]() |
![]() ![]() |
![]() |
![]() ![]() |
![]() |
| ||
Configuring User AccessThe grid engine system has the following four categories of users:
The following sections describe each category in more detail. Configuring Manager AccountsYou can configure Manager accounts with QMON or from the command line. Configuring Manager Accounts With QMONOn the QMON Main Control window, click the User Configuration button. The Manager tab appears, which enables you to declare which accounts are allowed to run any administrative command. ![]() This tab lists all accounts that are already declared to have administrative permission. To add a new manager account, type its name in the field above the manager account list, and then click Add or press the Return key. To delete a manager account, select it, and then click Delete. Configuring Manager Accounts From the Command LineTo configure a manager account from the command line, type the following command with appropriate options:
The following options are available:
Configuring Operator AccountsYou can configure operator accounts with QMON or from the command line. Configuring Operator Accounts With QMONOn the QMON Main Control window, click the User Configuration button, and then click the Operator tab. ![]() The Operator tab enables you to declare which accounts are allowed to have restricted administrative permission, unless the accounts are also declared to be manager accounts. See Configuring Manager Accounts With QMON. This tab lists all accounts that are already declared to have operator permission. To add a new operator account, type its name in the field above the operator account list, and then click Add or press the Return key. To delete an operator account, select it, and then click Delete. Configuring Operator Accounts From the Command LineTo configure an operator account from the command line, type the following command with appropriate options:
The following options are available:
Configuring User Access ListsAny user with a valid login ID on at least one submit host and one execution host can use the grid engine system. However, grid engine system managers can prohibit access for certain users to certain queues or to all queues. Furthermore, managers can restrict the use of facilities such as specific parallel environments. See Configuring Parallel Environments for more information. In order to define access permissions, you must define user access lists, which are made up of named sets of users. You use user names and UNIX group names to define user access lists. The user access lists are then used either to deny or to allow access to a specific resource in any of the following configurations:
Configuring User Access Lists With QMONOn the QMON Main Control window, click the User Configuration button, and then click the Userset tab. The Userset tab appears. Figure 4-1 Userset Tab ![]() In the grid engine system, a userset can be either an Access List or a Department, or both. The two check boxes below the Usersets list indicate the type of the selected userset. This section describes access lists. Departments are explained in Defining Usersets As Projects and Departments. The Usersets lists displays all available access lists. To display the contents of an access list, select it. The contents are displayed in the Users/Groups list. Note - The names of groups are prefixed with an @ sign. To add a new userset, click Add. To modify an existing userset, select it, and then click Modify. To delete a userset, select it, and then click Delete. When you click Add or Modify, an Access List Definition dialog box appears. Figure 4-2 Access List Definition Dialog Box ![]() To add a new access list definition, type the name of the access list in the Userset Name field. If you are modifying an existing access list, its name is displayed in the Userset Name field. To add a new user or group to the access list, type a user or group name in the User/Group field. Be sure to prefix group names with an @ sign. The Users/Groups list displays all currently defined users and groups. To delete a user or group from the Users/Groups list, select it, and then click the trash icon. | ||
| ||
![]() |