A data storage manager is provided attached to a data processing network having at least one host device and at least one storage volume. System resources are allocated among a plurality of storage tiers, each tier having at least one partition. At least one host device and at least one storage volume are associated with each partition and at least one application is associated with each partition of the lowest level storage tier. The storage manager also includes a user profile table which identifies various users along with a log-on code, at least authorized one IP address range and at least one authorized command. The storage manager also includes a verification system responsive to a received log-on code and requested operation to restrict the user to authorized IP address range(s) and authorized commands.