Partitioning management of system resources across multiple users

• US 8,898,116 B2
• Filed: 06/27/2013
• Issued: 11/25/2014
• Est. Priority Date: 12/09/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ripberger, Richard A.
• Primary Examiner(s): Rostami, Mohammad S
• Application Number:
  US13/928,659
• Publication Number:
  US 20130290335A1
• Time in Patent Office: 516 Days
• Field of Search: None
• US Class Current: 707/665
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 16/35 Clustering; Classification
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0629 Configuration or reconfiguration of storage systems
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Exemplary embodiments for partitioning management of storage resources in a computing storage environment across multiple users including an existing administrator and an existing non-administrator are provided. A method includes assigning the existing non-administrator a default user resource scope that is more limited than a user resource scope assigned to the existing administrator, associating existing storage resources with a default resource group, creating resource group objects for each new resource group, setting attributes in the resource group objects to define policies for storage resources to be associated with a corresponding new resource group, reassigning existing non-administrator from the default user resource scope to a new user resource scope, reassigning the existing storage resources from the default resource group to the new resource group, and applying the policies and access scopes allowing the existing non-administrator to create new storage resources within a scope of the corresponding new user resource scope.

Claims

1. A method of partitioning management of a plurality of storage resources in a computing storage environment across a plurality of users by a processor device, wherein the plurality of users includes an existing administrator and an existing non-administrator, the method comprising:

assigning the existing non-administrator a default user resource scope that is more limited than a user resource scope assigned to the existing administrator;

associating existing storage resources with a default resource group;

creating resource group objects for each new resource group;

setting attributes in the resource group objects to define policies for storage resources to be associated with a corresponding new resource group;

reassigning the existing non-administrator from the default user resource scope to a new user resource scope;

reassigning the existing storage resources from the default resource group to the new resource group; and

applying the policies and access scopes allowing the existing non-administrator to create new storage resources within a scope of the corresponding new user resource scope.

2. The method of claim 1, further comprising:

disabling access to the default resource group to prevent additional new storage objects from being added thereto.

3. The method of claim 1, wherein the user resource scope of the existing administrator has authority to access all storage resources in all resource groups.

4. The method of claim 3, further comprising:

creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

modifying one of the additional resource groups, wherein a plurality of policy attributes are changed in the one of the additional resource groups.

5. The method of claim 3, further comprising:

creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

deleting a corresponding one of the additional resource groups not being associated with at least one of the existing storage resources.

6. The method of claim 3, further comprising:

changing an association of at least one of the existing storage resources to a different one of the additional resource groups.

7. The method of claim 1, further comprising:

performing at least one of assigning and modifying the new user resource scope.

8. A system for partitioning management of a plurality of storage resources in a computing storage environment across multiple users, wherein the multiple users includes an existing administrator and an existing non-administrator, the system comprising:

at least one processor device; and

a storage controller operational in the computing storage environment, wherein the storage controller includes the at least one processor device and is adapted for;

assigning to an existing non-administrator a default user resource scope that is more limited than a user resource scope assigned to an existing administrator;

associating existing storage resources with a default resource group;

creating resource group objects for each new resource group;

setting attributes in the resource group objects to define policies for storage resources to be associated with a corresponding new resource group;

reassigning the existing non-administrator from the default user resource scope to a new user resource scope;

reassigning the existing storage resources from the default resource group to the new resource group; and

applying the policies and access scopes allowing the existing non-administrator to create new storage resources within a scope of the corresponding new user resource scope.

9. The system of claim 8, wherein the at least one processor device of the storage controller is further adapted for disabling access to the default resource group to prevent additional new storage objects from being added thereto.

10. The system of claim 8, wherein the user resource scope of the existing administrator has authority to access all storage resources in all resource groups.

11. The system of claim 10, wherein the at least one processor device of the storage controller is further adapted for:

creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

modifying one of the additional resource groups, wherein a plurality of policy attributes are changed in the one of the additional resource groups.

12. The system of claim 10, wherein the at least one processor device of the storage controller is further adapted for:

creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

deleting a corresponding one of the additional resource groups not being associated with at least one of the existing storage resources.

13. The system of claim 10, wherein the at least one processor device of the storage controller is further adapted for:

changing an association of at least one of the existing storage resources to a different one of the additional resource groups.

14. The system of claim 8, wherein the at least one processor device of the storage controller is further adapted for performing at least one of assigning and modifying the new user resource scope.

15. A computer program product for partitioning management of a plurality of storage resources in a computing storage environment across a plurality of users by a processor device, wherein the plurality of users includes an existing administrator and an existing non-administrator, the computer program product comprising a non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer program product comprising:

computer code for assigning the existing non-administrator a default user resource scope that is more limited than a user resource scope assigned to the existing administrator;

computer code for associating existing storage resources with a default resource group;

computer code for creating resource group objects for each new resource group;

computer code for setting attributes in the resource group objects to define policies for storage resources to be associated with a corresponding new resource group;

computer code for reassigning the existing non-administrator from the default user resource scope to a new user resource scope;

computer code for reassigning the existing storage resources from the default resource group to the new resource group; and

applying the policies and access scopes allowing the existing non-administrator to create new storage resources within a scope of the corresponding new user resource scope.

16. The computer program product of claim 15, further comprising computer code for disabling access to the default resource group to prevent additional new storage objects from being added thereto.

17. The computer program product of claim 15, wherein the user resource scope of the existing administrator has authority to access all storage resources in all resource groups and the computer program product further comprises:

computer code for creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

computer code for modifying one of the additional resource groups, wherein a plurality of policy attributes are changed in the one of the additional resource groups.

18. The computer program product of claim 15, wherein the user resource scope of the existing administrator has authority to access all storage resources in all resource groups and the computer program product further comprises:

computer code for creating additional resource groups and assigning at least one resource group label to the additional resource groups; and

computer code for deleting a corresponding one of the additional resource groups not being associated with at least one of the existing storage resources.

19. The computer program product of claim 15, wherein the user resource scope of the existing administrator has authority to access all storage resources in all resource groups and the computer program product further comprises:

computer code for changing an association of at least one of the existing storage resources to a different one of the additional resource groups.

20. The computer program product of claim 15, further comprising:

computer code for performing at least one of assigning and modifying the new user resource scope.