Skip to main content
Documentation

 

Druva Documentation

Predefined roles and rights

  1. Last updated
  2. Save as PDF
inSync Private Cloud Editions: File:/tick.png Elite File:/tick.png Enterprise

Overview

The predefined administrator roles are a combination of rights required to access and manage the inSync Master Management Console. Only the Server administrator can create and assign roles to inSync administrators.

Individual rights are grouped based on the access areas in the inSync Master Management Console. This topic describes each area, also known as category, the default rights assigned to the predefined roles, and tasks that administrators can perform using these rights.

Note: By default, all rights are applicable to the Server administrator.

Category: User Data Management

Download backup and share data
The following table lists the tasks that other administrators can perform with the Download backup and share data right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View and download share data for the user. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
View and download share data for the guest users. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

View and download workspace data.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Access user audit trails
The following table lists the tasks that other administrators can perform with the Access user audit trails right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Access user audit trails from Governance. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Access user audit trails from Workspaces. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: inSync Share Management

Create and manage workspaces, guest users and groups
The following table lists the tasks that other administrators can perform with the Create and manage workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Create workspaces.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage workspace data. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create share groups. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

View and download workspace data.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Manage share groups.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Add and remove users from inSync Share group. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Reset the password of a guest user. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete workspaces, guest users and groups
The following table lists the tasks that other administrators can perform with the Delete workspaces, guest users and groups right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete workspaces.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Delete share groups.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete guest users. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: User and Device Management

Create and import users on inSync
The following table lists the tasks that other administrators can perform with the Create and import users on inSync right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Add users individually.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Add a group of users by importing their information from a CSV file.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manually import users from your Active Directory. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete users and devices
The following table lists the tasks that other administrators can perform with the Delete users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete users.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete devices. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage users and devices
The following table lists the tasks that other administrators can perform with the Manage users and devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Synchronize inSync users with your Active Directory File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Disable users.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Disable devices.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Change storage assigned to a user.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Reset the password for a user. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Change quota for the user.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Change assigned profile
The following table lists the tasks that other administrators can perform with the  Change assigned profile right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the profile assigned to users.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Download authkeys
The following table lists the task that other administrators can perform with the Download authkeys right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Download the authentication key.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Upgrade inSync client
The following table lists the tasks that other administrators can perform with the Upgrade inSync client right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Server administrator role.

An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Upgrade  inSync Client on user laptops.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Decommission devices
The following table lists the tasks that other administrators can perform with the Decommission devices right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Decommission a laptop.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Decommission a mobile device.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Place auto-delete on hold for a device. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Remove the auto-delete hold status for a device.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Profile Management

Create profiles
The following table lists the tasks that other administrators can perform with the Create profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Create a profile.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Create profiles based on an existing profile.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete profiles
The following table lists the tasks that other administrators can perform with the Delete profiles right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete profiles.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit profiles
The following table lists the tasks that other administrators can perform with the Edit profiles right and the predefined administrator roles applicable to this right.
Note:
  • By default, all rights are applicable to the Server administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the maximum number of users for a profile.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Assign user quota for data backup. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Allow users to activate inSync.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update the maximum number of users for a profile.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup policies File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup content File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup schedules File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the data loss prevention permissions for devices. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update the mobile data permissions for the users.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update Share settings.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup policies
The following table lists the tasks that other administrators can perform with the Edit backup policies right and the predefined administrator roles applicable to this right.
Note:
  • By default, all rights are applicable to the Server administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Update the backup retention policy.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Update the user data privacy policy. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Allow web restore for users.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Configure login mechanism using the inSync Password.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure login mechanism using Active Directory. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Enforce your system password policy.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Update inSync notifications.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Mark user devices as inactive.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup content
The following table lists the tasks that other administrators can perform with the Edit backup content right and the predefined administrator roles applicable to this right.
Note:
  • By default, all rights are applicable to the Server administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Configure folders for backup. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure the global exclude list. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure custom folders for backup. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Include emails for backup. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow users to configure backup folders. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit backup schedules
The following table lists the tasks that other administrators can perform with the Edit backup schedules right and the predefined administrator roles applicable to this right.
Note:
  • By default, all rights are applicable to the Server administrator.
  • The profile administrator has restricted access associated with their profiles.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Update the schedule for the automated backups. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow or disallow users to update laptop. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Allow or disallow users to pause laptop backups. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Backup and Restore Management

Manage backup and restore
The following table lists the tasks that other administrators can perform with the Manage backup and restore right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View snapshots of backup data. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Start data backup for a device. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Restore data to a device. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Cancel live activities.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Pause auto-refresh of live activities. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Resume auto-refresh of live activities. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete snapshots
The following table lists the tasks that other administrators can perform with the Delete snapshots right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Delete snapshots.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Data Governance

Access data insights

The following table lists the tasks that other administrators can perform with the Access data insights right and the predefined administrator roles applicable to this right.

Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Search for backup data. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: inSync Deployment

View inSync settings
The following table lists the tasks that other administrators can perform with the View inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View inSync settings. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit inSync settings
The following table lists the tasks that other administrators can perform with the Edit inSync settings right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Email settings

Email account for inSync Server.

Sender name, signature, and reply-to address to emails.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Network settings

inSync Master URLs.

inSync Master Ports.

SSL certificate on inSync Master.

IP Address or FQDN of inSync Master.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Mobile Credentials setting

Certificates for the iOS devices.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Co-branding setting

Co-branding inSync

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Governance settings

Audit retention policy for users.

Audit retention policy for administrators.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

inSync License settings

Update inSync License.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage AD and Edge Server deployments
The following table lists the tasks that other administrators can perform with the Manage AD and Edge Server deployments right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Register AD Accounts with inSync. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Edit AD Accounts. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete AD Accounts from inSync. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure AD sync interval. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage mass deployment tokens. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Configure Edge Server for inSync Master.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Configure Edge Server with Storage Node. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Reporting and Alert Management

View and download reports and view alerts
The following table lists the tasks that other administrators can perform with the View and download reports and view alerts right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
View reports. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Download reports. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
View alerts. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Schedule reports
The following table lists the tasks that other administrators can perform with the Schedule reports right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin

Schedule reports.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Category: Storage Management

Manage Storage 
The following table lists the tasks that other administrators can perform with the Manage Storage right and the predefined administrator roles applicable to this right.
Note: By default, all rights are applicable to the Server administrator.
An administrator with this right can: Data Protection Officer Help Desk Admin Legal Admin Profile Admin View Only Admin
Create a file store. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete a storage. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Compact a storage.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create storage nodes on Windows. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create storage nodes on Linux. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Manage storage nodes.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete storage nodes. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create storage pools. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Manage storage pools. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Delete storage pools. File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png
Create high availability storage.  File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png

Manage high availability of a storage.

 File:/tick.png File:/tick.png File:/tick.png File:/tick.png File:/tick.png