7.1 Managing Security Groups and Workload Permissions

PlateSpin Migrate Web Interface provides a granular application-level access mechanism that permits only specific users to carry out workload migration tasks on specified workloads. This is accomplished by setting up security groups and assigning users and workloads to them.

NOTE:Security group permissions apply only to migrations performed using the Web Interface.

7.1.1 Prerequisites for Security Groups

The default users created during Migrate installation are added to every security group you create, by default. For efficient separation of permissions, you must create additional users and assign them to appropriate Workload Migration Roles (Administrator, Power User, or Operator) with permissions that best suit their role in your organization. For more information about the workload migration roles and how to configure them, see Section 4.1.1, PlateSpin Migrate Roles.

You must also discover workloads to be migrated by using the PlateSpin Migrate Web Interface. After discovery, you can add the workloads to an appropriate security group to be processed by its members for migration configuration and execution, according to the permissions allowed by each user’s assigned roles. See Section 20.6.2, Workload Discovery in the Migrate Web Interface.

  1. Assign one or more PlateSpin Migrate users to a Workload Migration Role whose permissions best suit that role in your organization.

  2. Discover workloads for migration.

7.1.2 Creating Security Groups for Migrate Web Interface

  1. In the PlateSpin Migrate Web Interface, click Settings > Permissions.

  2. On the Security Groups page, click Create Security Group.

  3. In the Security Group Name field, specify a name for the security group.

  4. (Optional) Click Add Users to select the users you want to grant access to this security group and click OK.

    A PlateSpin Migrate user you recently added to the PlateSpin Server host might not immediately list in the user interface. To list such newly added users, click Refresh User Accounts.

  5. (Optional) In the Migrate Web Interface, add workloads to PlateSpin Migrate that you want to add to the security group.

    See Section 20.6, Discovering Details for Source Workloads.

  6. (Optional) Click Assign Workloads, select the workloads you want to include in this group, then click OK.

    Only the users who are members of this security group have access to these workloads.

  7. Click Create to add the new group to the security groups list on the Security Groups page.

7.1.3 Modifying Security Group Members or Workloads

  1. In the Migrate Web Interface, select Settings > Permissions.

  2. On the Security Groups page, click the security group name, then edit the group information as required:

    • Add Users

    • Remove assigned users

      You cannot remove the default users who were created during Migrate installation.

    • Refresh User Accounts

    • Assign Workloads

    • Remove assigned workloads

  3. Click Save.

7.1.4 Deleting a Security Group

  1. In the Migrate Web Interface, select Settings > Permissions.

  2. On the Security Groups page, click Delete next to the name of the security group you want to delete.

    You cannot delete the default All Workloads security group with the default Migrate users.

  3. Click OK to confirm the deletion.