A scope of authority represents the full association between users, roles, and data: a representation of who may perform what operations, and where. In this way, a scope of authority sets boundaries on user actions.
To define a scope of authority:
Identify the use cases for which you must control access.
Review any known limitations and prerequisites which may apply for each asset type. The
PowerProtect Data Manager Appliance Release Notes and the user guides for each asset type provide more information.
For each use case, identify the associated resources, and then create or edit a corresponding resource group.
Resources and resource groups provides instructions.
For each use case, identify the required operations for each user or group.
Review the list of permissions, and then match each user or group to an appropriate role.
Role-based access control (RBAC) provides more information.
A user or group may require a combination of roles, such as
Restore Administrator for some assets and
User for others.
During the role assignment process, select any resource groups to which the specified role or roles should apply.
NOTE:You can only limit the
Backup Administrator,
Restore Administrator, and
User roles to specific resource groups. The
Administrator and
Security Administrator roles have full access to all resources.
You can also define scopes of authority to provide designated users with more control over their own data, such as performing self-service restores without administrator intervention.
Example: providing self-service restores with scopes of authority provides a practical example.
Scopes of authority restrict users from learning about and accessing resources which belong to someone else. Users can only see and operate on resources which are part of their scope of authority.
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\