PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500

Roles

A role defines the privileges and permissions that a user has to perform a group of tasks. When a user is assigned a role, you grant the user all of the privileges that are defined by the role.

By using predefined roles, you can limit access to PowerProtect Data Manager Appliance operations by applying the principle of least privilege. System-provided roles and associated privileges provides more information about the built-in roles that you can apply to common environments.

Roles also control access to resources such as backup data and infrastructure objects through resource groups. Data storage security settings provides more information about resource groups, while Scopes of authority provides information about how to use roles and resource groups to enforce information security.

Roles are assigned to users and groups during user creation or group mapping. You can change role assignments by editing a user or group. Managing local identity provider users and External authorization associations provide instructions.

You can assign a user to multiple roles. For example, a user who has both Backup Administrator and Restore Administrator roles but does not have full system administration privileges.

To view a list of available roles, select Administration > Access Control and select the Roles tab. The table displays each role with a brief description and the number of users who are assigned that role. Click to see a full list of the associated privileges for any role.