This dashboard specifies Role Based Access Control. If a resource is shown as protected in this dashboard, it means that the resource has access control enforced, based on the CloudControl policy's user-role configuration. Users can view the percentage of protected and unprotected resources, where the green section of each bar represents the percentage of protected resources in that category and the red section of each bar represents the percentage of unprotected resources. The number in the center of each colored section displays the number of hosts in that section.
For example, in the figure Protection Dashboard below, the far left bar, 18 is the number of protected resources in the Compute category. These groups match the four resource groups that administrators have access to, as visible in the Admin Access Dashboard. See also, Compute, Management, Network, and Storage.
Protection Dashboard
The data collection for this dashboard is also a scheduled event titled Trending RBAC Protection, like Directory Service Sync (for the Admin Access Dashboard) and Trending Compliance.
This scheduled event can be configured in Compliance > Scheduled Events. Trending RBAC Protection can also run at intervals from every 15 minutes to once a day.
Clicking on a section of the bar graph will redirect to the Details panel, showing data filtered on the specific resource group (represented in the bar graph), and will list resources protected under all applicable CloudControl Controls or unprotected under at least one CloudControl Control. For example, clicking on the Protected section of the Network bar will display.
Click Resources on Bar Graph for Details
The representation for Protection over time displays the change in percentage of protected resources for each group for all applicable hosts since CloudControl was freshly installed or upgraded. Each colored line represents a separate group, according to the legend.
Trending Number of Protected Resources by Category
Each time the Trending RBAC Protection scheduled event runs, the counts for the resource categories will be plotted on the trending chart.
This table lists out resources from one of the four resource groups, and their protection status under each applicable CloudControl Control. Each of the resource groups has a selection of different subgroups to classify the resources, as listed below:
Compute: VirtualMachine, HostSystem, ResourcePool, HostSystemCollection
Management: ManagementSystem
Network: SDNController, NetworkServiceContainer, Firewall, IPSec, Switch, VPNServer, LoadBalancer, DHCPServer, Router, NetworkSystemCollection
Storage: DataStore, StorageSystemCollection
Protection Details > Network Group > NetworkSystemCollection tab
For more information and use cases about role-based access control protection, see Configuring Security Options.
|
v 5.3.1 |
Copyright © 2018 HyTrust, Inc. All Rights Reserved. |
Follow us: |
