PowerProtect Data Manager 19.10 Security Configuration Guide

Modify identity provider group-to-role mapping

Only the Administrator and the Security Administrator roles can modify identity provider group-to-role mapping.

1. From the left navigation pane, select Administration > Access Control.
   The Access Control window appears.
2. Click the Users/Groups tab.
   PowerProtect Data Manager displays a list of configured user accounts and external identity provider groups, including any associated roles.
3. Click for any group to see the following information:
   • Group name
   • Group type
   • Group role
   • Date the group was mapped
4. Select the group that you want to edit, and then click Edit
   The Edit User/Group window opens on the User Type tab.
5. Review the information on the User Type tab.
   The domain and group name are read-only.
6. Click Next.
   The Edit User/Group window moves to the Role tab.
7. Select one or more applicable roles.
   To see a list of the permissions for each role, click >. You can further refine the applicability of each role on the next tab.
8. Click Next.
   The Edit User/Group window moves to the Summary tab.
9. Review your selections, correct any errors, and then click Finish.