Dell PowerProtect DD Management Center (DDMC) 7.9 Installation and Administration Guide

A user who does not have a role of none is already associated with a Tenant. Thus, the user credentials (user/password) of a user who has permission to view and possibly even change the configuration/data on the system have been given to a Tenant. If the user has the admin role, for example, the Tenant can now access (read/write) any other Tenant's data, and view/change any system configuration.

This security breach is present whether this (non-none role) user is associated with just one Tenant, or multiple, different Tenants. The main security breach is not that one user is used by multiple Tenants; it is that a user given to a Tenant for use can view and/or modify configuration and data that does not belong to the Tenant.

To prevent security breaches, data access users must always have a role of none. In some customer configurations where Tenants are considered trustworthy, Tenants may have some non-none role users, but the best security practice is to not allow this.