In this exercise, you will configure users in your Red Hat Virtualization environment using both newly configured and existing roles, as needed to perform common job responsibilities.
Outcomes
You should be able to configure four different users from the lab.example.com profile with various roles:
rhvadmin with the SuperUser role system-wide.
normaluser with the UserRole role system-wide.
poweruser with the PowerUserRole role system-wide.
dcadmin with the DataCenterAdmin role for the development data center.
Although we configure users and roles in this chapter all subsequent chapters will use the default username, password and profile.
Log in as the student user on workstation, and then run the lab users-roles start command.
This command ensures that the domain users of the Red Hat Enterprise Linux Identity Management server in the classroom are mapped to the appropriate roles in the Red Hat Virtualization environment.
[student@workstation ~]$lab users-roles start
Assign the SuperUser role, system-wide, to the rhvadmin user in the lab.example.com profile.
On workstation, open Firefox and navigate to https://rhvm.lab.example.com/ovirt-engine.
Click Administration Portal to log in to the web interface as the internal user called admin with redhat as the password.
Select the internal profile.
In the menu, click , and then click .
In the Configure dialog box, click System Permissions.
Click the button to add a role to a user.
In the Add System Permission to User dialog box, click the radio button, if not already selected.
Click the drop-down list under to select the item.
This item represents the lab.example.com profile you configured in the preceding exercise to allow Red Hat Virtualization Manager to use the Red Hat Enterprise Linux Identity Manager as a source for the users.
Click to display the users in the Red Hat Enterprise Linux Identity Manager server.
In the list of users that displays, click the check box for the rhvadmin user.
Click the drop-down list under Role to Assign.
From the list of available roles, select SuperUser role for rhvadmin.
Click to assign the specified role to the selected user.
Notice that the rhvadmin user displays in the System Permissions list.
This list confirms that the rhvadmin user has been assigned a role granting administrative access to Red Hat Virtualization.
In the Configure dialog box, click .
Verify that you can log in to the Administration Portal as the rhvadmin user in the lab.example.com profile.
Sign out as admin from the Administration Portal.
Log back in to the Administration Portal as the rhvadmin user that you have just added.
Use rhvadmin as the user name and redhat as the password.
In the field, click the drop-down list and select the profile.
Click the button to log in as the rhvadmin user.
As rhvadmin, assign the UserRole role, system-wide, to the normaluser user from the lab.example.com profile.
In the web interface click on the navigation pane in the left side and click from the options that appear.
In the Configure dialog box, click System Permissions.
Click the button to add a role to a user.
In the Add System Permission to User dialog box, click the radio button, if not already selected. Click the drop-down list under to select the item.
Click to display the users in the Red Hat Enterprise Linux Identity Manager server.
In the list of users that displays, click the check box for the normaluser user.
In the list of available roles, leave the default UserRole role selected for the normaluser user.
Click to assign the specified role to the selected user.
Notice that the normaluser user displays in the System Permissions list.
This list confirms that the normaluser user has been assigned a role granting access to Red Hat Virtualization.
Assign the PowerUserRole role, system-wide, to the user poweruser in the lab.example.com profile.
Click the button to add a role to another user.
In the Add System Permission to User dialog box, click the radio button, if not already selected. Click the drop-down list under to select the item.
Click to display the users in the Red Hat Enterprise Linux Identity Manager server.
In the list of users that displays, click the check box for the poweruser user.
Click the drop-down list under Role to Assign.
Choose PowerUserRole role from the list of available roles.
Click to assign the specified role to the selected user.
Notice that the poweruser user displays in the System Permissions list.
This list confirms that the poweruser user has been assigned a role granting access to Red Hat Virtualization.
In the Configure dialog box, click .
Assign the DataCenterAdmin role, for only the development data center, to the dcadmin user in the lab.example.com profile.
In the menu click , then choose .
Click the development data center among the available data centers.
Navigate to the Permissions tab and click to add a role to a user for the development data center.
In the Add Permission to User dialog box, click the radio button, if not already selected. Click the drop-down list under to select the item.
Click to display the users in the Red Hat Enterprise Linux Identity Manager server.
In the list of users that displays, click the check box for the dcadmin user.
Click the drop-down list under Role to Assign.
From the list of available roles, select DataCenterAdmin.
Click to assign the specified role to the selected user.
Notice that the dcadmin user displays in the Permissions list.
This list confirms that the dcadmin user has been assigned a role granting access to Red Hat Virtualization for the specific data center.
Sign out as rhvadmin from the Administration Portal.