PowerProtect Data Manager 19.10 Security Configuration Guide

Managing authentication and authorization

PowerProtect Data Manager provides a security model which controls authentication and authorization through several smaller building blocks.

Users and groups are defined by the local identity provider or by an external identity provider and group mapping. These sources are the means by which users identify themselves to PowerProtect Data Manager. Authentication provides more information about identity providers and about managing users and groups.

After authentication, each user or group has at least one assigned role. A role delegates authorization from the system administrator to users by associating a set of privileges which define the tasks that the user can perform. You assign a role to a user or a group as part of creating or modifying the user or group. Role-based access control (RBAC) provides information about roles and role assignments.