A storage controller is realized in which validity/invalidity of functions is settable in a unit of logical division in conformity with logical division of logical groups control is performed such that operation has the influence upon only the inside of a range defined by resource groups of logical division and an Inband I/F for accessing functions is made to match with the logical division. Further, access control cooperative with information on the user side (information of server, user and application) is realized by causing a management server to manage information in the storage controller and user information.