Predefined roles and rights
inSync Cloud Editions: 
Elite Plus Elite Enterprise 
Business
Elite Plus Elite Enterprise Business Overview
The predefined administrator roles are a combination of rights required to access and manage the inSync Management Console. Only the Cloud administrator can create and assign roles to administrators. For different types of predefined administrator roles, see administrator roles.
Individual rights are grouped based on the access areas in the inSync Management Console. This topic describes each area, also known as category, the default rights assigned to the predefined roles, and tasks that administrators can perform using these rights.
- A Druva Cloud Administrator can be created only through the Druva Cloud Platform Console. Click the Druva logo
to access the Global Navigation Panel > Home to launch the Druva Cloud Platform Console. See Manage Druva administrators for more information. - All other administrators can be created through the inSync Management Console as well as the Druva Cloud Platform Console.
- Rights available to the pre-defined roles can be viewed and managed only through the inSync Management Console.
- By default, all rights are applicable to the Druva Cloud Administrator.
- You can create only Druva Cloud Administrator and Cloud Administrator roles in the Business edition.
Access Path
To access the Predefined roles and rights page,
- On the inSync Management Console menu bar, click
> Administrators. - Click the Roles tab and then click on the desired Administrator role to view or manage their available Rights.
Category: User Data Management
- Download backup and share data
- The following table lists the tasks that other administrators can perform with the Download backup and share data right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Download user data 
View and download share data for the user View and download share data for the guest users
- Bulk export user data
-
The following table lists the tasks that other administrators can perform with the Bulk export user data right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Bulk export data
- Access user audit trails
- The following table lists the tasks that other administrators can perform with the Access user audit trails right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Access user audit trails from Workspaces
Category: Proactive Compliance
- View violation and settings
- The following table lists the tasks that other administrators can perform with the View violation and settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator inSync Compliance Administrator View Only Administrator View inSync Compliance policies, policy templates,sensitive data types, inSync Compliance settings
- Manage violations
- The following table lists the tasks that other administrators can perform with the Manage violations right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator inSync Compliance Administrator View Only Administrator Manage violations
- Manage settings
- The following table lists the tasks that other administrators can perform with the Manage settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator inSync Compliance Administrator View Only Administrator Edit inSync Compliance policies, policy templates,sensitive data types
Modify inSync Compliance settings
Category: inSync Share Management
- Create and manage workspaces, guest users and groups
- The following table lists the tasks that other administrators can perform with the Create and manage workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Manage workspace data Create share groups 
Add and remove users from inSync Share group Reset the password of a guest user
- Delete workspaces, guest users and groups
- The following table lists the tasks that other administrators can perform with the Delete workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Admin Delete guest users
Category: User and Device Management
- Create and import users on inSync
- The following table lists the tasks that other administrators can perform with the Create and import users on inSync right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Add a group of users by importing their information from a CSV file
Manually import users from your Active Directory
- Delete users and devices
- The following table lists the tasks that other administrators can perform with the Delete users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Delete devices
- Manage users and devices
- The following table lists the tasks that other administrators can perform with the Manage users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Synchronize inSync users with your Active Directory Reset the password for a user
- Change assigned profile
- The following table lists the tasks that other administrators can perform with the Change assigned profile right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
- Download authkeys
- The following table lists the task that other administrators can perform with the Download authkeys right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
- Upgrade inSync Client
- The following table lists the tasks that other administrators can perform with the Upgrade inSync Client right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator role.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
- Decommission devices
- The following table lists the tasks that other administrators can perform with the Decommission devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Place auto-delete on hold for a device 
- Download debug logs
- The following table lists the tasks that other administrators can perform with the Download debug logs right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
Manage Device Mapping
The following table lists the tasks that other administrators can perform with the Manage Device Mapping right and the predefined administrator roles applicable to this right. Cloud Administrator can enable this right for Help Desk admin, Profile admins, and custom roles. When enabled, the Help Desk and Profile Administrators can view all the mappings; however, they can add and edit mappings only for those users to whom they have access.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
-
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Mass deploy inSync Client on devices in a non-AD/LDAP environment
Delete a device mapping
Manage Client Upgrade
The following table lists the tasks that other administrators can perform with the Manage Client Upgrade right and the predefined administrator roles applicable to this right. Cloud Administrator can enable this right for Help Desk admin, Profile admins, and custom roles. When enabled, the Help Desk and Profile Administrators can manage bulk client upgrades only on the devices of those users to whom they have access.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
-
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Download List of users Cancel upgrade Download Report
Category: Profile Management
- Create profiles
- The following table lists the tasks that other administrators can perform with the Create profiles right and the predefined administrator roles applicable to this right.
-
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Delete profiles
- The following table lists the tasks that other administrators can perform with the Delete profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
- Edit profiles
- The following table lists the tasks that other administrators can perform with the Edit profiles right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Druva Cloud Administrator.
- The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Assign user quota for data backup Allow users to activate {{insync}} Edit backup policies Edit backup content Edit backup schedules Update the data loss prevention permissions for devices
Edit Devices
The following table lists the tasks that other administrators can perform with the Edit devices right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Druva Cloud Administrator.
- The profile administrator has restricted access associated with their profiles.
| An administrator with this right can: | Cloud Administrator | Data Protection Officer | Help Desk Administrator | Legal Administrator | Profile Administrator | View Only Administrator |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
| Update the user data privacy policy | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Configure login mechanism using Active Directory | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Configure folders for backup | |
|
|
|
|
|
| Configure the global exclude list | |
|
|
|
|
|
| Configure custom folders for backup | |
|
|
|
|
|
| Include emails for backup | |
|
|
|
|
|
| Allow users to configure backup folders | |
|
|
|
|
|
| Update the schedule for automated backups | |
|
|
|
|
|
| Allow or disallow users to update laptop backup | |
|
|
|
|
|
| Allow or disallow users to pause laptop backups | |
|
|
|
|
|
- Edit Cloud Apps
- The following table lists the tasks that other administrators can perform with the Edit Cloud Apps right and the predefined administrator roles applicable to this right.
| An Administrator with this right can: | Cloud Administrator | Data Protection Officer | Help Desk Administrator | Legal Administrator | Profile Administrator | View Only Administrator |
|---|---|---|---|---|---|---|
| Configure Cloud Apps for backup | |
|
|
|
|
|
| Configure the global exclude list | |
|
|
|
|
|
| Update the schedule for automated backups | |
|
|
|
|
|
| Data Retention for Cloud Apps | |
|
|
|
|
|
Category: Backup and Restore Management
Manage backup and restore
- The following table lists the tasks that other administrators can perform with the Manage backup and restore right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator View snapshots of backup data Start data backup for a device Restore data to a device Pause auto-refresh of live activities Resume auto-refresh of live activities
- Delete snapshots
- The following table lists the tasks that other administrators can perform with the Delete snapshots right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
Category: Data Data Governance
- Access data insights
-
The following table lists the tasks that other administrators can perform with the Access data insights right and the predefined administrator roles applicable to this right.
Note: By default:
- All rights are applicable to the Druva Cloud Administrator.
- Only Cloud Administrator and Legal Administrator can create, view, manage, and delete legal holds. For more information on Legal Administrator roles, see Create roles for a Legal Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Search for backup data
Track device location
-
The following table lists the tasks that other administrators can perform with the Track device location right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
| An administrator with this right can: | Cloud Administrator | Data Protection Officer | Help Desk Administrator | Legal Administrator | Profile Administrator | View Only Administrator |
|---|---|---|---|---|---|---|
| Trace user device | |
|
|
 |
|
|
Category: inSync Deployment
- View inSync settings
- The following table lists the tasks that other administrators can perform with the View inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin View inSync settings
- Edit inSync settings
- The following table lists the tasks that other administrators can perform with the Edit inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Email settings
Network settings
Restrict data networks for laptop backupsMobile Credentials setting
Password Policy settings
Single Sign-On setting
Co-branding setting
Data Governance settings
- Manage AD deployments
- The following table lists the tasks that other administrators can perform with the Manage AD deployments right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Install or upgrade inSync AD Connector Configure the inSync AD Connector Delete AD mappings Register AD Accounts with {{insync}} Update your AD Accounts credentials Delete AD Accounts from {{insync}} Configure AD sync interval Manage mass deployment tokens
Category: Reporting and Alert Management
- View and download reports and view alerts
- The following table lists the tasks that other administrators can perform with the View and download reports and view alerts right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator View reports Download reports View alerts
- Change report schedules
- The following table lists the tasks that other administrators can perform with the Change report schedules right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator
Category: Cache Management
- Manage CloudCache Servers
- The following table lists the tasks that other administrators can perform with the Manage CloudCache Servers right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Administrator Legal Administrator Profile Administrator View Only Administrator Add, install, and register inSync CloudCache Server Configure inSync CloudCache Server Manage inSync CloudCache Server
- Manage users on CloudCache
- The following table lists the tasks that other administrators can perform with the Manage users on CloudCache right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Druva Cloud Administrator.
An administrator with this right can: Cloud Administrator Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Prepare users for restore Manage users on inSync CloudCache Server