Hi Colin,  You could use the multi tenancy feature in ViPR Controller to have hosts or users/groups being restricted to single tenant.  In ViPR controller, hosts are discovered within a single tenant and so any host that is discovered within the tenant will be restricted for provisioning only within that tenant in which the host is discovered.  So in your example, you could have the Prod and Dev as two tenants and have vArrays mapped to the tenants and then the Prod servers are discovered in Prod tenant and are confined within the prod tenant and be managed by prod users and the dev servers are confined to the dev tenant and will not get listed for provisioning users who belong to other tenants.  Note: The users/groups can be mapped to only one tenant in ViPR and hence a single user cannot be given access or be mapped to both the prod and dev tenant.  This way the Prod servers will not be listed for dev users and the dev servers will not get listed for prod users during the provisioning operation. Also, single host cannot be discovered in multiple tenants, it can only only be discovered and be managed within a single tenant in ViPR.  Thanks, Davidson
Hi,  I am trying to understand how to restrict access to resources in ViPR for groups. I will use the example of Prod and Dev. I can see based on Virtual Array's and Virtual Pools I can restrict based on Tenants. I did not see anyway to restrict based on hosts. So in the case of hosts is it assumed that the hosts will be included in the Virtual Array and so be restricted based on that? Which means I would have to create a Virtual Array for each group of servers and other resources? Basically how do I prevent hosts that belong to a different group from showing up when provisioning storage to a host?   Thanks
Access Roles