JP6480127B2 - Management access control system and management access control method - Google Patents

Description

  The present invention relates to a management access control system and a management access control method. Specifically, the server operation management access in a predetermined organization that operates a plurality of servers is selectively performed for each management target server. It is related with the technology which makes it controllable.

  There is a so-called server virtualization technique that virtually divides various computer resources such as a processor, a memory, and a disk in a server device to configure a plurality of virtual servers that can be executed simultaneously on one server device. Such server virtualization technology enables companies that have introduced, operated, and managed many server devices to reduce the labor and cost involved in managing physical resources such as server devices, and flexibly according to the status of their work. It is a technology that makes it possible to change the allocation of computer resources.

  On the other hand, when operating a plurality of computers as described above, the necessity of appropriately managing user operations on each computer in accordance with the corresponding computer also increases. As an example of such a technique, for example, a remote power control request is not directly issued from a client to a BMC or similar hardware device that exists on a server and processes a remote power control request from the outside. A management server that accepts power control requests from clients in a centralized manner is installed, and this management server provides various tables that describe user and server groups and other attributes in response to power control requests received from clients. There has been proposed a technique (see Patent Document 1) that makes a remote power control request to a server instead of a client only when authentication is performed by referring to the server.

JP 2007-299427 A

  However, as described above, regarding an organization that operates a plurality of servers (including the concept of a virtualized server) or an organization that uses an operation service of such a server, there may be one account for server operation management for each organization. Many. Therefore, if there are multiple managers in the organization who are involved in server operation management, and each manager is responsible for the operation management target server (which is responsible for a given business process), each administrator is responsible. There is a possibility that various operations such as accessing an external server (eg, a server in another department different from the one to which the user belongs) and browsing the information may be possible.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a technique capable of selectively controlling access for server operation management in a predetermined organization that operates a plurality of servers for each server to be managed.

The management access control system of the present invention that solves the above-mentioned problems relates to a server group that is a group of servers responsible for the corresponding business for each predetermined business, information relating to an administrator of the corresponding server group, and the business that each of the servers bears A configuration information database that defines information, and access that indicates whether or not an operation management access to each server that constitutes the server group is permitted to the manager of the server group and operation management operation contents that are permitted in each server A storage device storing an operation authority database whose level is determined for each server, and according to a failure detection event related to the predetermined server, the information on the predetermined server is checked against the configuration information database, and a failure occurs. identify the business said predetermined server is responsible to identify servers responsible for identified business, to the specified server group For each server containing the predetermined server that generated the disorder, the settings to be accessible for operation management with respect to specified servers administrator, executed by the operation authority database, since the server management An access device for performing an access control process based on the access permission information and the access level information determined for each server in the operation authority database related to the access request target server; It is characterized by providing.

In addition, the management access control method of the present invention includes, for each predetermined business, information relating to a server group that is a group of servers responsible for the business and information relating to an administrator of the server group, and information relating to the business that each of the servers bears. and configuration information database that defines the server group access permission and each server access levels indicating the operation contents for management allowed by the server each for operation management for each server constituting the server group for administrators An information processing apparatus having a storage device storing an operation authority database determined for each of the information causes a failure by checking the information of the predetermined server against the configuration information database in response to a failure detection event related to the predetermined server Sa which is the predetermined server identifies the business in charge has to identify servers responsible for specified operations, and the particular For each server containing the predetermined server the failed belonging to server group, the setting of the accessible for operation management to the administrator of the specified servers, running in the operation authority database, since In response to an access request for server operation management, a process for performing access control based on access permission information and access level information determined for each server in the operation authority database related to the access request target server is executed. It is characterized by.

  According to the present invention, it is possible to selectively control each server to be managed with respect to access for server operation management in a predetermined organization that operates a plurality of servers.

It is a network block diagram including the management access control system of this embodiment. It is a figure which shows the hardware structural example of the access control system for management in this embodiment. It is a figure which shows the data structural example of the structure information database of this embodiment. It is a figure which shows the example of a data structure of the operation authority database of this embodiment. It is a figure which shows the example of a data structure of the schedule database of this embodiment. It is a flowchart which shows the process sequence example of the management access control method in this embodiment.

--- System configuration ---

  Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including a management access control system 100 of this embodiment. A management access control system 100 shown in FIG. 1 is a computer system that can selectively control access for server operation management in a predetermined organization that operates a plurality of servers for each server to be managed.

  In this embodiment, the management terminal 100 illustrated in FIG. 1 is the minimum configuration of the management access control system. However, in addition to the management terminal 100, the operation management system 300 may be included in the configuration of the management access control system. Good. Hereinafter, unless otherwise specified, the management terminal 100 will be described as a management access control system.

  The management terminal 100 of this embodiment is connected to the blade server system 200 and the operation management system 300 via the network 20 so as to be communicable. Among these, the blade server system 200 includes a plurality of blade servers 210, and one or a plurality of virtual servers 220 are deployed in each blade server 210. A virtual server 220 configured in the same blade server 210 is defined as a virtual server group 225. Each virtual server 220 is installed with an OS (Operating System) 230 and an appropriate application program, and provides functions corresponding to each business in the operating company of the blade server system 200.

  In this embodiment, one company or company group operates the blade server system 200 described above. For example, a predetermined virtual server 220 is managed for each business department in the company or for each group company in the company group. Assume that you are using it. Accordingly, it is not preferable to be able to access and operate the virtual server 220 managed by another business department or group company even within the same company or company group. Therefore, the management terminal 100 according to the present embodiment avoids such a situation, and allows the server operation management access to be selectively controlled for each management target server that is different for each business department or group company. It will be. The server operation management access is, for example, operations such as power on / off, restart, and status reference performed by the server administrator operating the input device 105 of the management terminal 100 to the server to be managed. Applicable.

  The operation management system 300 described above is a server device that is connected to the blade server system 200 via the network 20 and monitors the operating status of each virtual server 220 in each blade server 210. As the monitoring event of the operation management system 300, life and death, disk I / O, CPU load, memory load, etc. of the virtual server 220 can be assumed. As for the monitoring operation in the operation management system 300 for such a monitoring event, for example, ping monitoring every predetermined time is assumed. This ping monitoring is performed when the operation management system 300 periodically transmits a packet to the virtual server 220, and when the response from the virtual server 220 to the packet does not return normally, to a predetermined e-mail address or the like. The operation is such as sending a notification email of the occurrence of a malfunction.

  Note that the ping monitoring operation described above may be executed not by the operation management system 300 but by the management terminal 100 itself. Alternatively, the operation management system 300 or the management terminal 100 may acquire a periodic monitoring result report from a monitoring agent program set in advance in the virtual server 220. In any case, an appropriate conventional technique may be adopted as the technique related to the monitoring operation itself.

  Further, the hardware configuration of the above-described management terminal 100 as the management access control system is as shown in FIG. The management terminal 100 includes a storage device 101 composed of an appropriate nonvolatile storage element such as an SSD (Solid State Drive) or a hard disk drive, a memory 103 composed of a volatile storage element such as a RAM, and an OS 110 held in the storage device 101. Under the control of the above, the program 102 is read out and executed in the memory 103 to perform overall control of the apparatus itself, as well as the arithmetic unit 104 such as a CPU for performing various determinations, calculations and control processes, and accepts key input and voice input from the user An input device 105, an output device 106 such as a display that displays processing data, and a communication device 107 that is connected to the network 20 and performs communication processing with other devices.

  The storage device 101 stores at least a program 102 for implementing functions necessary for the management access control system of the present embodiment, a configuration information database 125, an operation authority database 126, and a schedule database 127. Yes. However, these databases 125 to 127 are not only configured to be stored in the storage device 101 of the management terminal 100 but also to a configuration stored in an external storage device connected to the management terminal 100 via a cable or the like. Good. Specific configuration examples of the configuration information database 125, the operation authority database 126, and the schedule database 127 will be described later.

  Next, functions provided in the management terminal 100 that is the management access control system of this embodiment will be described. As described above, the functions described below can be said to be functions implemented by executing the program 102 included in the management terminal 100, for example.

  The management terminal 100 relates to a predetermined virtual server 220 (failure occurrence server), for example, in response to a failure detection event obtained from the operation management system 300, the server ID of the above-mentioned virtual server 220 that is a failure occurrence server, the configuration information The operation authority database 126 is set so that the virtual server group 225 including the above-described failure server is identified by collating with the database 125, and the operation management access is permitted for each virtual server 220 of the identified virtual server group 225. It has a function to be executed in

  In addition, the management terminal 100 responds to the access request for server operation management after the processing of setting the access for operation management as possible in the operation authority database 126 described above in the operation authority database 126 related to the access request target virtual server 220. It has a function of performing access control based on access permission information.

  Further, the management terminal 100 obtains from the operation management system 300 a failure recovery event related to the above-mentioned failure occurrence server after setting the operation management database to be accessible for operation management in the operation authority database 126 described above. In this case, the operation authority database 126 has a function of executing setting for disabling access for operation management with respect to each virtual server 220 of the virtual server group 225 including the above-described failure occurrence server.

  In addition, the management terminal 100 responds to the access request for server operation management after the processing for setting the operation access inaccessible in the operation authority database 126 as described above in the operation authority database 126 related to the access request target virtual server 220. It has a function of performing access control based on access permission information.

  When the management terminal 100 detects the arrival of the maintenance time for the predetermined virtual server 220 (maintenance target server) based on the above-described maintenance schedule 127, the management terminal 100 collates the server ID of the maintenance target server with the configuration information database 125. A function of specifying the virtual server group 225 including the maintenance target server and executing the setting for enabling operation management for each virtual server 220 of the specified virtual server group 225 in the operation authority database 126. I have.

  In addition, the management terminal 100 responds to the access request for server operation management after the processing of setting the access for operation management as possible in the operation authority database 126 described above in the operation authority database 126 related to the access request target virtual server 220. It has a function of performing access control based on access permission information.

  In addition, the management terminal 100 sets the above-described operation authority database 126 to allow access for operation management with respect to each of the virtual servers 220 described above, and then performs the above-described operation according to the maintenance time end event related to the maintenance target server. The operation authority database 126 has a function to execute the setting for disabling operation management for each virtual server 220 of the virtual server group 225 including the maintenance target server.

In addition, the management terminal 100 responds to the access request for server operation management after the processing for setting the operation access inaccessible in the operation authority database 126 as described above in the operation authority database 126 related to the access request target virtual server 220. It has a function of performing access control based on access permission information.
--- Data structure example ---

  Next, an example of the data structure in the database used by the management terminal 100 of this embodiment will be described. FIG. 3 is a diagram showing a data configuration example of the configuration information database 125 of this embodiment. The configuration information database 125 is a database in which the virtual server 220 in each blade server 210 of the blade server system 200 is classified for each business in the operating company or operating company group of the blade server system 200, and the business uniquely identifying the business Using the ID as a key, the server ID that uniquely identifies each virtual server 220 that handles the relevant business, the ID of the business department or group company that performs the relevant business, and the administrator of the virtual server 220 of the relevant business It is a collection of records in which user IDs to be identified are associated. In this configuration information database 125, the group of virtual servers 220 associated with the same business ID becomes a virtual server group 225.

  In the example of the configuration information database 125 illustrated in FIG. 3, for example, the virtual server 220 that handles the business with the business ID “w1” is the virtual server with the server IDs “s1”, “s3”, and “s5”. The group company that performs the business “w1” is “g1”, the managers of the virtual servers “s1”, “s3”, and “s5” are “A”.

  FIG. 4 is a diagram showing a data configuration example of the operation authority database 126 of the present embodiment. The operation authority database 126 is a database that defines the operation contents for server operation management permitted for each virtual server 220 and whether or not the current operation is possible, and uses a server ID that uniquely identifies the virtual server 220 as a key. , An access level indicating operation contents for server operation management allowed for the corresponding virtual server 220, and an access permission indicating whether or not the operation contents of the access level for the corresponding virtual server 220 are permitted at the present time. It is a collection of records with associated values.

  As for the above access level values, “1” is “only the reference operation for the corresponding virtual server is possible”, “2” is “only control processing such as starting and stopping of the corresponding virtual server is possible”, and “3” is “ Both the reference operation and control processing for the virtual server are allowed ”. In the above-described access permission values, “0” indicates “not accessible” and “1” indicates “accessible”.

  In the example of the operation authority database 126 illustrated in FIG. 4, for example, for the virtual servers having the server IDs “s1”, “s3”, and “s5”, the access levels are “1”, “2”, “2”, access permission is “0”, and so on. As shown here, the server operation management operation for the virtual server 220 is not allowed at normal times when no failure or the like has occurred. The access permission value is a value that is changed from “0” to “1” when the management terminal 100 receives a notification of any failure related to the virtual server 220 from the operation management system 300 or the like.

FIG. 5 is a diagram showing a data configuration example of the schedule database 127 of the present embodiment. This schedule database 127 includes a collection of records in which the maintenance time for each virtual server 220 responsible for the processing of the business and the values of the maintenance execution time period are associated with the business ID for uniquely identifying the business. It has become. In the example of the schedule database 127 shown in FIG. 5, for example, for the work with the work ID “w1”, maintenance is performed during the time period “daily” and “0:00 to 2:00”, and the work with the work ID “2”. With respect to the above, it is shown that maintenance is scheduled to be executed in the time zone “21:00 to 28:00” of “second Saturday”.
--- Processing procedure example ---

  The actual procedure of the management access control method in this embodiment will be described below with reference to the drawings. Various operations corresponding to the management access control method described below are realized by a program that the management terminal 100 serving as the management access control system reads out to the memory or the like and executes. And this program is comprised from the code | cord | chord for performing the various operation | movement demonstrated below.

  FIG. 6 is a flowchart showing a processing procedure example of the management access control method according to the present embodiment. The management terminal 100 in this flow monitors the occurrence of either a failure detection notification from the operation management system 300 or the arrival of the maintenance time specified in the schedule database 127 (s100). Note that the management terminal 100 can monitor the arrival of each maintenance time specified in the schedule database 127 by using a calendar function, a clock function, and the like that are generally provided as an information processing apparatus.

  For example, when a failure detection notification is received from the operation management system 300 during execution of the above monitoring (s101: failure detection), the management terminal 100 displays the virtual server 220 indicated by the failure detection notification, that is, the server of the failure occurrence server. The ID is collated with the configuration information database 125, and the work handled by the above-mentioned failure occurrence server is specified (s102). For example, when the server ID of the failure occurrence server is “s1”, the business with the business ID “w1” can be specified in the configuration information database 125 of FIG.

  Subsequently, the management terminal 100 identifies the virtual server group 225 responsible for the business identified in step s102 described above in the configuration information database 125 (s103). For example, when the business ID of the business identified in step s102 is “w1”, the server IDs “s1”, “s3”, and “s5” can be identified as the virtual server group 225.

  Next, the management terminal 100 executes setting for enabling access for operation management in the operation authority database 126 for each virtual server 220 of the virtual server group 225 identified in step s103 described above (s104). If the virtual server group 225 identified in step s103 is the server ID “s1”, “s3”, or “s5”, the management terminal 100 in this step displays the access permission column of the corresponding record in the operation authority database 126. The value is changed from “0” to “1”.

  On the other hand, if the arrival of the maintenance time is detected for the predetermined virtual server 220 (or the business or the virtual server group 225) during the monitoring in step s100 described above (s101: maintenance time has come), the management terminal 100 The server ID of the virtual server 220 detected as the maintenance time coming, that is, the server ID of the maintenance target server is collated with the configuration information database 125 to identify the task in charge of the maintenance target server (s105).

  Subsequently, the management terminal 100 identifies the virtual server group 225 responsible for the business identified in step s105 described above in the configuration information database 125 (s106). The management terminal 100 also identifies each virtual server group 225 identified here. For the virtual server 220, the setting for enabling access for operation management is executed in the operation authority database 126 (s107). The processing in step s107 is the same as that in step s104 described above.

  As described above, after changing the access permission setting for each virtual server 220 for the virtual server group 225 to which the virtual server 220 in which the failure is detected or the virtual server 220 for which the maintenance time has come belongs, the management terminal 100 It is assumed that a login request including authentication information such as an administrator user ID and password is received by the input device 105 as an access request for server operation management (s108).

  Next, the management terminal 100 collates the authentication information obtained in step s108 described above with predetermined authentication information (not shown, but general authentication information, which is stored in the storage device 101 in advance). Then, login authentication processing of the administrator is performed (s109). The management terminal 100 refers to the administrator who has succeeded in the login authentication, collates the user ID with the configuration information database 125, and identifies the task handled by the corresponding administrator and the virtual server group 225 responsible for the task (s110).

  Subsequently, the management terminal 100 reads the access permission information for each virtual server 220 of the virtual server group 225 identified in step s110 described above, that is, the access request target virtual server 220, with the operation authority database 126, and the value is If “1”, that is, access is possible (s111: y), out of access for server operation management to each virtual server 220 of the corresponding virtual server group 225, the operation authority database 126 specifies the corresponding virtual server 220. Access control that allows only the operation contents according to the access level is performed (s112). For example, when the server ID of the access request target virtual server 220 is “s1”, the management terminal 100 reads from the operation authority database 126 that the access permission information is “1”, and further operates the operation authority. Only the operation content corresponding to the access level “1” of the virtual server “s1” in the database 126, that is, the operation of “only reference is allowed” is permitted from the input device 104.

  On the other hand, when the access permission value read from the operation authority database 126 for each virtual server 220 of the virtual server group 225 identified in step s110 described above, that is, the access request target virtual server 220, is “0”, that is, access is impossible. (S111: n), the management terminal 100 does not accept the server operation management operation for the virtual server 220, and ends the process.

  Thereafter, when a predetermined time elapses and a failure recovery notification regarding the above-described failure server is obtained from the operation management system 300, or when the end of the maintenance time regarding the maintenance target server is detected (s113: y), the management terminal 100 In the operation authority database 126, the operation authority database 126 is set to make the operation management inaccessible for each virtual server 220 of the virtual server group 225 including the failure server or the maintenance target server (step S108). Then, the processing for the access request for server operation management from the administrator is similarly repeated.

  Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and various modifications can be made without departing from the scope of the invention.

  According to this embodiment, access for server operation management in a predetermined organization that operates a plurality of servers can be selectively controlled for each server to be managed.

  At least the following will be clarified by the description of the present specification. That is, in the management access control system according to the present embodiment, the computing device responds to a failure recovery event related to the predetermined server after setting the operation authority database to allow operation management access in the operation authority database. The operation authority database is set so as not to allow access for operation management with respect to each server of the server group including the predetermined server, and the access request target server for subsequent server operation management access requests It is also possible to further execute a process of performing access control based on information on whether access is permitted in the operation authority database.

  According to this, the above-mentioned operation management access to the server and each server of the server group to which the server belongs belongs only during the failure occurrence period of the server, and the operation management access is denied during the other periods. Control and access control for operation management can be made more precise.

  In the management access control system according to the present embodiment, the storage device further includes a schedule database that is defined for a maintenance schedule for each job, and the arithmetic device is configured to use a predetermined server based on the maintenance schedule. The maintenance time for the server is detected, the information on the predetermined server is collated with the configuration information database, the server group including the predetermined server is specified, and the operation management is accessible for each server of the specified server group. The process is executed in the operation authority database, and access control is performed based on the access permission information in the operation authority database related to the access request target server for subsequent access requests for server operation management. May be further executed.

  According to this, it is possible to automatically change the above-described access permission setting for the corresponding server in accordance with server maintenance, and to perform access control that allows various operations performed by an administrator or the like in accordance with this maintenance.

  Further, in the management access control system of the present embodiment, the computing device may cause an event of the end of the maintenance period for the predetermined server after setting the operation authority database to allow access for operation management in the operation authority database. Accordingly, the setting for disabling operation management for each server of the server group including the predetermined server is executed in the operation authority database, and the access request target for subsequent server operation management access requests A process of performing access control based on access permission information in the operation authority database regarding the server may be further executed.

  According to this, the above-mentioned operation management access to the server and each server of the server group to which the server belongs belongs only during the maintenance period of the server, and the operation management access is denied during other periods. Control becomes possible, and control related to operation management access can be made more precise.

  Further, in the management access control method according to the present embodiment, after the information processing apparatus is set in the operation authority database to allow operation management access for each server, a failure recovery event for the predetermined server Accordingly, the setting for disabling operation management for each server of the server group including the predetermined server is executed in the operation authority database, and the access request target for subsequent server operation management access requests Processing for performing access control may be further executed based on access permission information in the operation authority database related to the server.

  Further, in the management access control method of the present embodiment, the information processing apparatus further includes a schedule database that defines a maintenance schedule for each job in the storage device, and the information processing apparatus relates to a predetermined server based on the maintenance schedule. The arrival of maintenance time is detected, the information on the predetermined server is collated with the configuration information database, the server group including the predetermined server is specified, and the operation management is accessible for each server of the specified server group. Processing for performing access control based on information on whether or not access in the operation authority database related to the access request target server is performed in response to subsequent access requests for server operation management. Further, it may be executed.

  Further, in the management access control method of the present embodiment, after the setting that the information processing apparatus allows operation management access for each server in the operation authority database, the maintenance time end event for the predetermined server Accordingly, the operation authority database is set to prohibit access for operation management with respect to each server of the server group including the predetermined server, and the access request target for subsequent access requests for server operation management is executed. It is also possible to further execute a process for performing access control based on access permission information in the operation authority database relating to the server.

20 network 100 management terminal (access control system for management))
101 Storage Device 102 Program 103 Memory 104 Arithmetic Device 105 Input Device 106 Output Device 107 Communication Device 125 Configuration Information Database 126 Operation Authority Database 127 Schedule Database 200 Blade Server System 210 Blade Server 220 Virtual Server 225 Virtual Server Group (Server Group)
110, 230 OS (Operating System)
300 Operation management system

Claims (8)

A configuration information database that defines, for each predetermined business , a server group that is a group of servers responsible for the business and information on an administrator of the server group, and information on the business that each of the servers bears , and management of the server group And an operation authority database in which an access level indicating whether or not each server constituting the server group is accessible for operation management and the operation management operation permitted in each server is defined for each server. Storage device
In response to a failure detection event related to a predetermined server, the information on the predetermined server is collated with the configuration information database to identify the business in charge of the predetermined server in which the failure has occurred , and identify the server group responsible for the identified business Then, with respect to each server including the predetermined server in which the failure belonging to the specified server group has occurred , a setting for allowing operation management access to an administrator of the specified server group is set in the operation authority database. Access control for subsequent server operation management based on access permission information and access level information determined for each server in the operation authority database related to the access request target server. A management access control system comprising: an arithmetic device that executes processing to be performed. The arithmetic unit is
In the operation authority database, after setting to allow access for operation management with respect to each server of the server group including the predetermined server in which the failure has occurred, according to a failure recovery event for the predetermined server in which the failure has occurred, For each server of the server group including the predetermined server, the operation authority database is set so that the administrator of the server group cannot access the operation management, and an access request for subsequent server operation management is made. On the other hand, it further executes a process of performing access control based on access permission information in the operation authority database related to the access request target server and the access level information.
The management access control system according to claim 1. The storage device
A schedule database that defines a maintenance schedule for each business,
The arithmetic unit is
A server group including the predetermined server at which the maintenance time has arrived by detecting the arrival of the maintenance time for the predetermined server based on the maintenance schedule determined in the schedule database and checking the information of the predetermined server against the configuration information database For each server of the specified server group, the operation authority database is set so that the administrator of the specified server group can be accessed for operation management. A process for performing access control based on the access permission information in the operation authority database related to the access request target server and the access level information for the access request target server,
The management access control system according to claim 2. The arithmetic unit is
In response to the event of the end of the maintenance period related to the predetermined server at which the maintenance time has arrived after the setting for allowing access for operation management with respect to each server of the server group including the predetermined server at the maintenance time in the operation authority database For each server in the server group including the predetermined server, the operation authority database is set so that the administrator of the server group cannot access the operation management. In response to the access request, a process of performing access control based on information on whether access is permitted in the operation authority database related to the access request target server and information on the access level is further executed.
The management access control system according to claim 3. A configuration information database that defines, for each predetermined business , a server group that is a group of servers responsible for the business and information on an administrator of the server group, and information on the business that each of the servers bears , and management of the server group And an operation authority database that defines, for each server , an access level indicating whether or not each server constituting the server group can be accessed for operation management, and operation operations permitted for each server are stored. An information processing apparatus including a storage device
In response to a failure detection event related to a predetermined server, the information on the predetermined server is collated with the configuration information database to identify the business in charge of the predetermined server in which the failure has occurred , and identify the server group responsible for the identified business Then, with respect to each server including the predetermined server in which the failure belonging to the specified server group has occurred , a setting for allowing operation management access to an administrator of the specified server group is set in the operation authority database. The access control is executed based on the access permission information and the access level information determined for each server in the operation authority database related to the access request target server for subsequent access requests for server operation management. An access control method for management characterized by executing processing. The information processing apparatus is
In the operation authority database, after setting to allow access for operation management with respect to each server of the server group including the predetermined server in which the failure has occurred, according to a failure recovery event for the predetermined server in which the failure has occurred, For each server in the server group including the predetermined server, the operation authority database is set so that the administrator of the specified server group cannot access the operation management, and the subsequent server operation management access is performed. In response to the request, further execute a process of performing access control based on the access permission information in the operation authority database regarding the access request target server and the access level information.
The management access control method according to claim 5, wherein: The information processing apparatus is
In the storage device, further comprising a schedule database that defines a maintenance schedule for each business,
A server group including the predetermined server at which the maintenance time has arrived by detecting the arrival of the maintenance time for the predetermined server based on the maintenance schedule determined in the schedule database and checking the information of the predetermined server against the configuration information database For each server of the specified server group, the operation authority database is set to make the operation management accessible to the administrator of the specified server group, and the subsequent server operation management A process for performing access control based on the access permission information in the operation authority database related to the access request target server and the access level information in response to the access request for
The management access control method according to claim 6. The information processing apparatus is
In the operation authority database, after setting that each server of the server group including the predetermined server at which the maintenance time has come to be accessible for operation management, an event of the end of the maintenance time with respect to the predetermined server at which the maintenance time has come Accordingly, with respect to each server of the server group including the predetermined server, the setting for disabling operation management access for the server group administrator is executed in the operation authority database for subsequent server operation management. A process of performing access control on the access request based on the access permission information in the operation authority database related to the access request target server and the access level information,
The management access control method according to claim 7, wherein:

Images