Dual Authentication for the HMC commands

.Hi,

We discussed about the possible options and with the current access model, the implementation involves some amount of complexity and we are waiting to see if there are more votes for this particular request for dual authentication.

This sounds like a workflow issue. For example, the off-shore admin issues a shutdown on the HMC and you want a US-based admin to provide secondary authorization. The off-shore request could get placed in an HMC queue, the US-based admin could be notified of it, there maybe delay when the US-based admin acknowledges the request and takes action, perhaps the request times out after a while, etc. Or the off-shore admin sends an e-mail to the US-based admin to do the shutdown.

Are you asking for this to be in GUI, CLI, and / or REST? Do you want this configurable per command?

This is a sizeable effort for us, and we've not received this request before. This is why I said if this is a workflow issue then it's more efficient to address this outside HMC.

Please reopen and send to next level of support. This is not about the custom roles for users. I would like to have dual authorization for certain commands before the command executes.
Thank you
Dan

Hi,
The requested enhancement can be achieved with the existing resource roles/user roles in HMC. Apart from user roles, there are resource roles where a user can be restricted to a specific set of resources which can be used to handle cases like unauthorized shutdown of managed systems.

Thanks.

Hi,

Please look at comments earlier. Please let us know if you have more queries on the authorization.

Thanks.

Creating a new RFE based on Community RFE #84919 in product Power Hardware Management Console.