MSMOM,

I am building a new SCOM 2012 R2 UR9 environment for a secure multi-tenant 
platform (cloud ESX based)

I was asked about data inside management packs and I have determined in the 
normal way we use MP causes a problem.

Rule: No data pertaining to customer A can be presented on any other customer 
server.

So If I create a Unsealed MP which contains views, Groups overrides must reside 
in this MP. So an override could exist in here which means this MP is delivered 
to all Agent based servers - VERY bad

If a create a MP of Views and Group and seal it then create a overrides MP for 
that customer (without using the customer name) I can ensure no MP's are sent 
to the agents with customer information in - VERY GOOD

The other option is to name Groups and views with cryptic names - makes the GUI 
experience very poor.

My question: What are the pitfalls and has anyone used Sealed Group/View MP to 
good use? In this kind of scenario?


Peter Hakesley | Monitoring & Automation Technical Lead Engineer, Data Centre 
Services

t: +44(0)845 155 6556 ext: 4006
e: [email protected] | w: www.scc.com<http://www.scc.com/>
a: SCC, CV1, Cole Valley, 20 Westwood Avenue, Tyseley, Birmingham B11 3RZ






Reply via email to