Patent ID: 8555025

Claim:
A method for selective device access control in a data storage system, comprising: initializing a plurality of access groups associated with logical devices used to access the data storage system, each of the plurality of access groups corresponding to a range of the logical devices; pursuant to a mount of a logical volume of the data storage system, providing a management class construct name associated with a mount request for the logical volume; determining whether the logical volume has been previously bound; reading a management class definition in a management class definition database, to determine if a match is found between the management class construct name associated with the mount request for the logical volume and the management class definition, if the logical volume has not been previously bound; and binding an access group name of one of the plurality of access groups to at least one of a metadata of the logical volume at a volume creation and a volume header of the logical volume, wherein the logical volume, once bound to the access group name, is granted access by those logical devices in a range of the logical devices corresponding to the one of the plurality of access groups.