A security role user, who may be referred to as security officer, can manage other security officers, authorize procedures that require security officer approval, and perform all tasks supported for user-role users.
Welcome to Dell Technologies Data Domain series.
How to create a Security User account in Data Domain. Reference Dell Knowledge Article number 186091. This video was created to: Show the steps to create a security user on Data Domain.
This video presents the following: What is a security user? A security role user, who may be referred to as a security officer, can manage other security officers, authorize procedures that require security officer approval, and perform all tasks supported for user-role users.
As a result of compliance regulations, most command options for administering sensitive operations, such as DD Encryption, DD Retention Lock Compliance, and archiving, now require security officer approval.
Where do we need Security Officers? As this is a destructive procedure, this operation is available to administrative users only and requires security officer authorization.
The command will not run if a security policy is not configured. FS destroy. System sanitation requires security officer authorization, and cannot be run if a security policy is not configured on the system.
You are prompted to enter security officer credentials to enable encryption. If the system date is not correct, set the correct date (security officer authorization is required).
Setting system date change frequency and date change limit. Guidelines and notes to create the user: The following guidelines apply to the security-role users.
Only the sysadmin user (the default user created during the DD OS installation) can create the first security officer, after which the privilege to create security officers is removed from the sysadmin user.
After the first security officer is created, only security officers can create other security officers. Let's begin. Log in to "Data Domain System Manager".
Click on "Administration". Select "Access". Click on "Local Users". Click on "Create". Under the "Create" "General" tab, fill in the details to create a new user with security role, such as "User" name and "Password". Select "security" under "Management Role". Click "OK".
Security user with username "secuser" is created. Please reference the following for more information: KB 186091. Data Domain: The alert "Security officer user account must be created" appears after upgrading to DDOS 7.5 or above. And Data Domain Admin and install guides.
Thank you for watching.
