Skip to main content
Documentation
Chat NowSubmit Case

 

Druva Documentation

Predefined roles and rights

  1. Last updated
    18:30, 8 Jul 2017
  2. Save as PDF
inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business

Overview

The predefined administrator roles are a combination of rights required to access and manage the inSync Management Console. Only the Cloud administrator can create and assign roles to inSync administrators. For different types of predefined administrator roles, see inSync administrator roles.

Individual rights are grouped based on the access areas in the inSync Management Console. This topic describes each area, also known as category, the default rights assigned to the predefined roles, and tasks that administrators can perform using these rights.

Note:
  • By default, all rights are applicable to the Cloud administrator.
  • You can only create Cloud admin role in the Business edition.

Access Path

To access the Predefined roles and rights page,

  1. On inSync Management Console menu bar, click > Administrators.
  2. Click the Roles tab and then click on the desired Administrator role to view or manage their available Rights.

Category: User Data Management

Download backup and share data
The following table lists the tasks that other administrators can perform with the Download backup and share data right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Download user data File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
View and download share data for the user File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
View and download share data for the guest users File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

View and download workspace data

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Bulk export user data

The following table lists the tasks that other administrators can perform with the Bulk export user data right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Bulk export data File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Access user audit trails
The following table lists the tasks that other administrators can perform with the Access user audit trails right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Access user audit trails from Governance

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Access user audit trails from Workspaces File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: inSync Share Management

Create and manage workspaces, guest users and groups
The following table lists the tasks that other administrators can perform with the Create and manage workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Create workspaces

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage workspace data File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create share groups File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

View and download workspace data

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Manage share groups

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Add and remove users from inSync Share group File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Reset the password of a guest user File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete workspaces, guest users and groups
The following table lists the tasks that other administrators can perform with the Delete workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete workspaces

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Delete share groups

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete guest users File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: User and Device Management

Create and import users on inSync
The following table lists the tasks that other administrators can perform with the Create and import users on inSync right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Add users individually

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Add a group of users by importing their information from a CSV file

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manually import users from your Active Directory File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete users and devices
The following table lists the tasks that other administrators can perform with the Delete users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete devices File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage users and devices
The following table lists the tasks that other administrators can perform with the Manage users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Synchronize inSync users with your Active Directory File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Disable users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Disable devices

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Change storage assigned to a user

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Reset the password for a user File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Change quota for the user

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Change assigned profile
The following table lists the tasks that other administrators can perform with the  Change assigned profile right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the profile assigned to users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Download authkeys
The following table lists the task that other administrators can perform with the Download authkeys right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Download the authentication key

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Upgrade inSync client
The following table lists the tasks that other administrators can perform with the Upgrade inSync client right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Cloud administrator role.

An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Upgrade inSync Client on user laptops

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Decommission devices
The following table lists the tasks that other administrators can perform with the Decommission devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Decommission a laptop

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Decommission a mobile device

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Place auto-delete on hold for a device File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Remove the auto-delete hold status for a device

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Download debug logs
The following table lists the tasks that other administrators can perform with the Download debug logs right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Download debug logs

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Profile Management

Create profiles
The following table lists the tasks that other administrators can perform with the Create profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Create a profile

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Create profiles based on an existing profile

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete profiles
The following table lists the tasks that other administrators can perform with the Delete profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete profiles

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit profiles
The following table lists the tasks that other administrators can perform with the Edit profiles right and the predefined administrator roles applicable to this right.
Note:
  • By default, all rights are applicable to the Cloud administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the maximum number of users for a profile

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Assign user quota for data backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow users to activate inSync File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup policies File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup content File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup schedules File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the data loss prevention permissions for devices File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update the mobile data permissions for users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update Share settings

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

 

Edit Devices

The following table lists the  tasks that other administrators can perform with the Edit devices right and the predefined administrator roles applicable to this right.

Note:

  • By default, all rights are applicable to the Cloud administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the backup retention policy

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the user data privacy policy File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Allow web restore for users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Configure login mechanism using the inSync Password

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure login mechanism using Active Directory File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update inSync notifications

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Mark user devices as inactive

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure folders for backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure the global exclude list File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure custom folders for backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Include emails for backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow users to configure backup folders File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the schedule for automated backups File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow or disallow users to update laptop backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow or disallow users to pause laptop backups File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
 
Edit Cloud Apps
The following table lists the tasks that other administrators can perform with the Edit Cloud Apps right and the predefined administrator roles applicable to this right.
An Administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Configure Cloud Apps for backup File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure the global exclude list File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the schedule for automated backups File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Data Retention for Cloud Apps File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

   Category: Backup and Restore Management
Manage backup and restore
The following table lists the tasks that other administrators can perform with the Manage backup and restore right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View snapshots of backup data File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Start data backup for a device File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Restore data to a device File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Pause auto-refresh of live activities File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Resume auto-refresh of live activities File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Cancel live activities

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete snapshots
The following table lists the tasks that other administrators can perform with the Delete snapshots right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete snapshots

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Data Governance

Access data insights

The following table lists the tasks that other administrators can perform with the Access data insights right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Cloud administrator.

An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Search for backup data File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

 Track device location

The following table lists the tasks that other administrators can perform with the Track device location right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Cloud administrator.

An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Trace user device

Category: inSync Deployment

View inSync settings
The following table lists the tasks that other administrators can perform with the View inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View inSync settings File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit inSync settings
The following table lists the tasks that other administrators can perform with the Edit inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Email settings

Sender name, signature, and reply-to address to emails

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Network settings

Restrict data networks for laptop backups		 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Mobile Credentials setting

Configure certificates for iOS devices

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Password Policy settings

Enable password policy for administrators

Enable password policy for users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Single sign-on setting

Configure single sign-on for inSync users

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Co-branding setting

Co-branding inSync

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Governance settings

Audit retention policy for users

Audit retention policy for administrators

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage AD deployments
The following table lists the tasks that other administrators can perform with the Manage AD deployments right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Install or upgrade inSync AD Connector File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure the inSync AD Connector File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Create AD mappings

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete AD mappings File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Install AD connectors

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Register AD Accounts with inSync File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update your AD Accounts credentials File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete AD Accounts from inSync File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure AD sync interval File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage mass deployment tokens File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Reporting and Alert Management

View and download reports and view alerts
The following table lists the tasks that other administrators can perform with the View and download reports and view alerts right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View reports File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Download reports File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
View alerts File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Change report schedules
The following table lists the tasks that other administrators can perform with the Change report schedules right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Change report schedules

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Cache Management

Manage CloudCache Servers
The following table lists the tasks that other administrators can perform with the Manage CloudCache Servers right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Add, install, and register inSync CloudCache Server File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure inSync CloudCache Server File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage inSync CloudCache Server File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage users on CloudCache
The following table lists the tasks that other administrators can perform with the Manage users on CloudCache right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Cloud administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Prepare users for restore File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage users on inSync CloudCache Servers File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png