Predefined roles and rights


Overview
The predefined administrator roles are a combination of rights required to access and manage the inSync Master Management Console. Only the Server administrator can create and assign roles to inSync administrators.
Individual rights are grouped based on the access areas in the inSync Master Management Console. This topic describes each area, also known as category, the default rights assigned to the predefined roles, and tasks that administrators can perform using these rights.
Note: By default, all rights are applicable to the Server administrator.
Category: User Data Management
- Download backup and share data
- The following table lists the tasks that other administrators can perform with the Download backup and share data right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin View and download share data for the user. View and download share data for the guest users.
- Access user audit trails
- The following table lists the tasks that other administrators can perform with the Access user audit trails right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Access user audit trails from Governance. Access user audit trails from Workspaces.
Category: inSync Share Management
- Create and manage workspaces, guest users and groups
- The following table lists the tasks that other administrators can perform with the Create and manage workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Manage workspace data. Create share groups. Add and remove users from inSync Share group. Reset the password of a guest user.
- Delete workspaces, guest users and groups
- The following table lists the tasks that other administrators can perform with the Delete workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Delete guest users.
Category: User and Device Management
- Create and import users on inSync
- The following table lists the tasks that other administrators can perform with the Create and import users on inSync right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Add a group of users by importing their information from a CSV file.
Manually import users from your Active Directory.
- Delete users and devices
- The following table lists the tasks that other administrators can perform with the Delete users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Delete devices.
- Manage users and devices
- The following table lists the tasks that other administrators can perform with the Manage users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Synchronize inSync users with your Active Directory Reset the password for a user.
- Change assigned profile
- The following table lists the tasks that other administrators can perform with the Change assigned profile right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Download authkeys
- The following table lists the task that other administrators can perform with the Download authkeys right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Upgrade inSync client
- The following table lists the tasks that other administrators can perform with the Upgrade inSync client right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator role.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Decommission devices
- The following table lists the tasks that other administrators can perform with the Decommission devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Place auto-delete on hold for a device.
Category: Profile Management
- Create profiles
- The following table lists the tasks that other administrators can perform with the Create profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Delete profiles
- The following table lists the tasks that other administrators can perform with the Delete profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
- Edit profiles
- The following table lists the tasks that other administrators can perform with the Edit profiles right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Server administrator.
- The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Assign user quota for data backup. Edit backup policies Edit backup content Edit backup schedules Update the data loss prevention permissions for devices.
- Edit backup policies
- The following table lists the tasks that other administrators can perform with the Edit backup policies right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Server administrator.
- The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Update the user data privacy policy. Configure login mechanism using Active Directory.
- Edit backup content
- The following table lists the tasks that other administrators can perform with the Edit backup content right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Server administrator.
- The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Configure folders for backup. Configure the global exclude list. Configure custom folders for backup. Include emails for backup. Allow users to configure backup folders.
- Edit backup schedules
- The following table lists the tasks that other administrators can perform with the Edit backup schedules right and the predefined administrator roles applicable to this right.
Note:
- By default, all rights are applicable to the Server administrator.
- The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Update the schedule for the automated backups. Allow or disallow users to update laptop. Allow or disallow users to pause laptop backups.
Category: Backup and Restore Management
- Manage backup and restore
- The following table lists the tasks that other administrators can perform with the Manage backup and restore right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin View snapshots of backup data. Start data backup for a device. Restore data to a device. Pause auto-refresh of live activities. Resume auto-refresh of live activities.
- Delete snapshots
- The following table lists the tasks that other administrators can perform with the Delete snapshots right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Category: Data Governance
- Access data insights
-
The following table lists the tasks that other administrators can perform with the Access data insights right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Search for backup data.
Category: inSync Deployment
- View inSync settings
- The following table lists the tasks that other administrators can perform with the View inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin View inSync settings.
- Edit inSync settings
- The following table lists the tasks that other administrators can perform with the Edit inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Email settings
Network settings
Mobile Credentials setting
Co-branding setting
Governance settings
inSync License settings
- Manage AD and Edge Server deployments
- The following table lists the tasks that other administrators can perform with the Manage AD and Edge Server deployments right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Register AD Accounts with inSync. Edit AD Accounts. Delete AD Accounts from inSync. Configure AD sync interval. Manage mass deployment tokens. Configure Edge Server with Storage Node.
Category: Reporting and Alert Management
- View and download reports and view alerts
- The following table lists the tasks that other administrators can perform with the View and download reports and view alerts right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin View reports. Download reports. View alerts.
- Schedule reports
- The following table lists the tasks that other administrators can perform with the Schedule reports right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Category: Storage Management
- Manage Storage
- The following table lists the tasks that other administrators can perform with the Manage Storage right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin Create a file store. Delete a storage. Create storage nodes on Windows. Create storage nodes on Linux. Delete storage nodes. Create storage pools. Manage storage pools. Delete storage pools. Create high availability storage.