Patent ID: 8543701

Claim:
A computer system comprising: a storage system for controlling read access or write access from a host computer to a storage device, wherein the storage system includes: a plurality of resource groups respectively defined by grouping of a plurality of resources; a storage area for storing management information of the plurality of resource groups and association information between the plurality of resources and the plurality of resource groups; and a plurality of user groups, each user group having allocated to it a resource group and an authority which permits a user belonging to the user group to execute an operation on the resource group when the user is logged into the storage system; and a management device for managing the plurality of resources for the storage system and a plurality of users sharing the storage system; wherein, in response to receiving a request for allocating a first resource group to a user group, the management device is configured to: use first information to determine whether the first resource group includes both a first resource which is necessary to execution of the authority allocated to the user group and a second resource which is not necessary to execution of the authority allocated to the user group, wherein the first information relates to a necessary resource type for execution of the authority allocated to the user group; create, if it is determined that the first resource group includes both a first resource which is necessary to execution of the authority allocated to the user group and a second resource which is not necessary to execution of the authority allocated to the user group, a second resource group including the first resource without the second resource, and represent the second resource group with the first resource group on a display of the management device.