Patent ID: 8639775

Claim:
A computer system comprising: a plurality of storage apparatuses having one or more storage devices; and a host computer for sending or receiving information to or from each storage apparatus via networks, wherein: two storage apparatuses among the plurality of storage apparatuses are migration source storage apparatuses and a storage apparatus of the plurality of storage apparatuses is a migration destination storage apparatus, the computer system is configured to migrate data of a plurality of migration source volumes of each migration source storage apparatus via the networks to a plurality of migration destination volumes of the migration destination storage apparatus, the host computer is configured to: switch from a plurality of network paths connecting each migration source volume and the host computer to a plurality of network paths connecting each migration destination volume and the host computer on a condition that a migration setting is set to migrate the data of each migration source volume to each migration destination volume, and recognize each migration destination volume as each migration source volume; the migration destination storage apparatus includes a controller configured to: send or receive information to or from the host computer; and manage each migration destination volume as an access target of the host computer; and manage each migration destination volume by associating it with each migration source storage apparatus; divide the migration destination volumes into a plurality of resource groups based on identification information for identifying each migration source volume; manage a plurality of resources related to each migration destination volume by associating a migration destination volume with each resource group, each resource including at least a logical device and a port; manage each migration destination volume and each resource belonging to each resource group as operation targets to be allocated individually to each migration source user who uses each migration source apparatus, and as operation targets over which only each migration source user has operation authority; manage role management by maintaining a map from role to resource groups, a map from group identifier (ID) to roles, a map from role ID to role names and authority bitmaps, and a map from bits of the authority bitmap to an authority; and manage users by assigning users one or more roles or group IDs, and by executing an authority on a resource only if the user has the authority for the resource based on the one or more roles or groups assigned to the user.