In ViPR, the policies an administrator  can set at the hierarchy levels include:  • Tenants or subtenants: This encompasses a set of users or an organization receiving storage services, most likely from a service provider. • Security role assignments: These policies set coarse-grained security to tenants; for example, make someone a Tenant Admin (can do anything within the tenancy), a Project Admin (can create new projects within the tenancy), or an end user (cannot do anything unless granted privileges to one or more projects). • Projects: This refers to an application or some other meaningful resource container from the user perspective. • ACL assignments: This feature allows admins to delegate privileges to specific end users to let them manage storage resources within this project. • Virtual Storage Pools: ACL assignments for the landlord determine which tenants/users are able to allocate resources from this virtual pool. • Virtual Storage Arrays: ACL assignments for the landlord determine which tenants/users are able to allocate resources from this virtual array.   For more information, check out the Add Users articles in the Configure ViPR Virtual Data Center section of the ViPR product documentation at the below link:  [URL]
What can an administrator set for ViPR security and access control?
ViPR Security and Access Control