Skip to main content

 

Druva Documentation

Configuring access and privacy policies for users

This topic explains how to configure access and privacy policies for an existing user. Access policies include permission to restore data using a Web browser, Active Directory authentication, and mandating password policy. The privacy policy enables users to prevent the administrators from viewing their data. Note: You can configure access and privacy policies by changing users' profile settings. Any change made to a profile will impact all users associated with the profile.

Allowing users to restore data using a Web browser

If users are allowed to restore data using a Web browser, they can log on to inSync Web and restore data through it. If the option is not enabled, they can restore data only through inSync client. They can still log on to inSync Web, but the restore data tab will not be visible for them.

To allow users to restore data using any Web browser

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile assigned to the users.
  3. Click the Backup Policies tab.
  4. Under Retention and Access Policies, click Edit. The Edit Profile window appears.
    allowrestorefromwebbrowser.png
  5. Select Allow restore from a Web browser.
  6. Click Save.

Allowing users to log on to inSync using their Active Directory credentials

Active Directories (AD) are used to centrally manage authentication and authorization of users and computers in a Windows domain type network. You can configure inSync to use AD to authenticate users. If enabled, users can use their AD credentials to:

  • Activate inSync client
  • Log on to inSync Companion App
  • Log on to inSync Web

To enable user authentication through AD

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile assigned to the users.
  3. Click the Backup Policies tab.
  4. Under Retention and Access Policies, click Edit. The Edit Profile window appears.
  5. On the Login using list, select Active Directory. Additional fields are displayed.
    adlogin.png
  6. Enter the following details:
    • Active directory host IP / FQDN: Enter the IP address of the server that hosts the AD.
    • Active directory port: Enter the port number used to communicate with the AD.
    • Use secure connection: Select if the AD allows communication only through HTTPS.
  7. Click Save.

Forcing users to follow system password policy for inSync

You can mandate inSync users to follow the password policy that your organization has adopted. This is applicable only when the users are logging on to inSync using inSync credentials and not their AD credentials.

To force users to follow system password policy

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile assigned to the users.
  3. Click the Backup Policies tab.
  4. Under Retention and Access Policies, click Edit. The Edit Profile window appears.
  5. Click to clear the Ignore system password policy for users check box. 
    passwordpolicy.png
  6. Click Save.

Allowing users to prevent administrators from accessing their data

By default, inSync administrators can restore backed up data on the inSync server. However, you can empower your users to choose to prevent administrators from accessing their data. 

Note: Once a user chooses to prevent administrators from accessing data, administrators cannot restore data for that user even after changing the profile settings or moving the user to a different profile.

To allow users to prevent administrators from accessing their data

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile assigned to the users.
  3. Click the Backup Policies tab.
  4. Under Retention and Access Policies, click Edit. The Edit Profile window appears.
  5. Select Allow users to disallow admin access to data.
    disallowadminacces.png
  6. Click Save.

Allowing users to modify proxy settings

You can allow users to configure proxy settings if the inSync client has to communicate with the inSync server through a proxy server. 

To allow users to modify proxy settings

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile you want to modify.
  3. Click the Laptop Backup Schedule tab.
  4. Under Laptop Backup Resources​, click Edit. The Edit Profile window appears. 
  5. Select Allow users to edit proxy settings.
  6. Click Save.

Allowing users to access backed up data from mobile devices

You can allow users to access their backup data from the inSync Companion App installed on their mobile devices.

To allow users to access their data from mobile device

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile you want to modify.
  3. Click the Mobile Access & Backup tab.
  4. Under Mobile Access, click Edit. The Edit Profile window appears.
  5. Select Allow access from mobile devices.
    mobileaccess.png
  6. Click Save.

Forcing users to use security code for mobile access

You can force users to use a four digit security code for every login to the inSync Companion App.

To force users to use security code for mobile access

  1. On the menu bar, click Manage > Profiles.
  2. Click the profile you want to modify.
  3. Click the Mobile Access & Backup tab.
  4. Under Mobile Access, click Edit. The Edit Profile window appears.
  5. Select Enforce PIN for mobile access.
    enforcepin.png
  6. Click Save.

  • Was this article helpful?