Storage system, management server, and access control method for storage system

A management server for managing a storage device including a host computer and a storage device that includes a memory device from which the host computer reads data and to which the host computer writes data, wherein

• the host computer and the storage device are provided for each domain,
• device information including information indicating a correspondence between the host computer and the memory device from which the host computer reads data and to which the host computer writes data, information from which the domain to which the host computer belongs and the domain to which the memory device belongs are specified, and information indicating a duplication relationship between the memory devices is managed, and
• a processor of the management server
• specifies based on the device information, when an instruction to operate the memory device is received from the host computer, one among the memory devices and having the duplication relationship with an operation target among the memory devices,
• determines, according to an attribute of the one among the memory devices that has been specified, an attribute of the operation target among the memory devices,
• specifies, based on the device information, the domain to which the host computer as an operation source belongs and the domain to which the operation target among the memory devices belongs,
• determines, based on the attribute of the operation target among the memory devices and the domain to which the host computer as an operation source belongs and the domain to which the operation target among the memory devices belongs, authority to operate the operation target among the memory devices from the host computer as an operation source, and
• permits, when determination is made that the authority is granted, the host computer as an operation source to operate the operation target among the memory devices.

An access control method for a storage system including a host computer and a storage device that includes a memory device from which the host computer reads data and to which the host computer writes data, the access control method being executed by the storage system, wherein

• the host computer and the storage device are provided for each domain,
• the storage system manages
• device information including information indicating a correspondence between the host computer and the memory device from which the host computer reads data and to which the host computer writes data, information from which the domain to which the host computer belongs and the domain to which the memory device belongs are specified, and information indicating a duplication relationship between the memory devices, and
• a processor of the storage system performs
• specifying based on the device information, when an instruction to operate the memory device is received from the host computer, one among the memory devices and having the duplication relationship with an operation target among the memory devices,
• determining, according to an attribute of the one among the memory devices that has been specified, an attribute of the operation target among the memory devices,
• specifying, based on the device information, the domain to which the host computer as an operation source belongs and the domain to which the operation target among the memory devices belongs,
• determining, based on the attribute of the operation target among the memory devices and the domain to which the host computer as an operation source belongs and the domain to which the operation target among the memory devices belongs, authority to operate the operation target among the memory devices from the host computer as an operation source, and
• operating the operation target among the memory devices when determination is made that the authority is granted.