Draft Document for Review February 7, 2020 3:15 pm 8464ch09_Oper.fm Deleting a Storage Authentication Policy The user can delete a Storage Authentication Service policy if it is not in effect on any cluster.  The Local policy cannot be deleted. Ensure that no clusters are assigned to the policy so that  it can be deleted. If clusters are assigned to the policy, use  Modify  from the  Select Action menu to remove the assigned clusters. To delete a Storage Authentication Service Policy from a TS7700 grid, complete the following  steps: 1. On the TS7700 MI, click  Access  Security Settings  from the left navigation window. 2. From the Security Settings window, go to the Authentication Policies table and complete  the following steps: a. Select the radio button next to the policy that must be deleted. b. Select  Delete  from the  Select Action  menu. c. Click  Go  to open the Confirm Delete Storage Authentication Service policy window. d. Click  OK  to delete the policy and return to the Security Settings window, or click  Cancel  to abandon the delete operation and return to the Security Settings window. 3. Confirm the policy deletion: Click  OK  to delete the policy. Before a new Authentication Policy can be used, it must be tested. The test validates the login  credentials (user ID and password) in all clusters for which this user ID and role are  authorized. Also, access to the external resources that are needed by an external  authentication policy, such as an SSPC or an LDAP server, is tested. The credentials that are  entered in the test window (User ID and Password) are authenticated and validated by the  LDAP server, for an external policy.  Testing an Authentication Policy Tip:  The policy must be configured to an LDAP server before being added in the TS7700  MI. External users and groups to be mapped by the new policy are checked in LDAP  before being added. To test the security settings for the TS7700 grid, complete the following steps. Use these  steps to test the roles that are assigned to the user name by an existing policy: 1. From the Security Settings window, go to the Authentication Policies table can complete  the following steps: a. Select the radio button next to the policy to test. b. Select  Test  from the  Select Action  menu. c. Click  Go  to open the Test Authentication Policy window. 2. Select the check box next to the name of each cluster on which to conduct the policy test. 3. Enter values for the following fields: – User name: The user name for the TS7700 M I. This value consists of 1 - 16 Unicode  characters. – Password: The password for the TS7700 MI. This value consists of 1 - 16 Unicode  characters. Note:  If the user name that is entered belongs to a user that is not included on the  policy, test results show success, but the result comments show a null value for the role  and access fields. Also, the user name that entered cannot be used to log in to the MI. Chapter 9. Configuring and operating the IBM TS7700  471