PowerProtect Data Manager 19.13 Network-Attached Storage User Guide

Permissions required for NAS protection

The following table lists the permissions that are required for NAS protection.

Table 1. Permissions required for NAS protection
Appliance	Permissions required for a backup/backup user	Permissions required for a restore/restore user	Permissions required for a discovery	Permissions required for a snapshot
PowerStore	Read permission for the asset Proxy host in the asset access list	Write permission for the asset Proxy host in the asset access list	Array management credentials with roles as storage admin	Array management credentials with roles as storage admin
PowerScale	Read Permission - BackupAdmin Proxy host in the asset access list	Write permission - BackupAdmin Proxy host in the asset access list	Array management credentials with role as BackupAdmin	Array management credentials with role as BackupAdmin
NOTE: To access the PowerScale Web UI, the user must be a member of the SystemAdmin role. With the BackupAdmin role, the user cannot access the PowerScale web UI. The PowerScale user must have these privileges to perform discovery, backup, and restore: ISI_PRIV_LOGIN_CONSOLE, ISI_PRIV_LOGIN_PAPI, ISI_PRIV_AUTH, ISI_PRIV_NETWORK, ISI_PRIV_NFS, ISI_PRIV_SMB, ISI_PRIV_SNAPSHOT, and ISI_PRIV_SYNCIQ.
Unity	Read Permission Proxy host in the asset access list	Write permission Proxy host in the asset access list	Array management credentials with roles as storage admin	Array management credentials with roles as storage admin