Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerProtect DD Management Center (DDMC) 7.9 Installation and Administration Guide

Creating access for users

To set up access to DDMC, you must add users and access groups and add permissions for certain roles.

Steps

  1. Click the Settings button (the gear icon) in the DDMC banner, then select Access > Local Users.
  2. Click Add to create users.

    These users can log in to DDMC, but cannot see any other systems. You can add permissions to view (user role), administer (admin role or limited-admin), or take snapshots (backup operator) for groups and systems.

    User groups have either admin or user roles; user roles can be admin, limited-admin, and user. If a user or a user group has the admin role, they can view all DD systems by default; it is not necessary to set any other permissions for admin users and groups.

  3. Access Authentication to create access groups (NIS, Windows (using Workgroup or Active Directory), and LDAP) in DDMC.
  4. For users and user groups with the user role, you must set permissions on systems so they can view the systems. Select Administration > Permissions.
  5. Select Add (green plus sign).
  6. In the Add Permissions dialog, select where to add the permission:
    • Add permissions to systems – Select this option, and from the list of managed systems, select the checkboxes of the systems where the permissions are to be assigned.
    • Add permissions to groups – Select this option, and from the list of groups, select the checkboxes of the groups where the permissions are to be assigned.
  7. In the User area, select Add (green plus sign), select one or more users from the Select Users dialog, and select Select.
  8. Click in the Role field for the user, and select the access role: Administrator, Limited-Admin, Backup Operator, or User.
  9. Select Add (green plus sign).

    The users are given the assigned role (Administrator, Limited-Admin, Backup Operator, or User) for the selected systems or groups.

Next steps

To simplify the management of permissions:

  • It is recommended that the use of the admin role for the DDMC be minimal.
    • The admin role can manage all Data Domain systems in the DDMC inventory. In addition, the admin for the DDMC configures the DDMC properties and groups and assigns its permissions.
    • Configure most logins for DDMC with the user role.
  • Use NIS user groups for permissions – this simplifies the process for adding, removing, and modifying users without changing the permission assignment.
  • Use DD System Groups for permissions rather than assigning permissions to individual systems.

    By assigning permissions at the group level, policy-based permissions can be used with a union model that is applied to the entire group hierarchy.

  • Start with lower-level permissions at the top of the hierarchy:
    • Assign lower-level permissions toward the root of the Group hierarchy.
    • Assign higher-level permissions toward the leaf of the Group hierarchy.
    • Use a union model, not an override model. This makes it easy to change permissions at lower levels without affecting the entire hierarchy.

Verify Changes:

  • After assigning permissions or changing group membership, verify the change by looking at the Effective role for a system.

Use Central Administration:

  • Use DDMC to centrally administer all systems, reducing the use of local accounts on each managed system. Turn off direct user interface access to systems that are managed by DDMC.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\