Skip to main content
druva_logo.pngDruva
|
Documentation

How can we help you?

 

Trending articles:
Druva Documentation

Manage Druva Administrators

  1. Last updated
  2. Save as PDF

Overview

Druva administrators use the services enabled for their account to protect data created and managed on devices and servers in their organization. Druva administrators are categorized as:

  • Druva Cloud Administrator
  • Product Administrators
    • Administrators for inSync inSync
    • Administrators for Phoenix  Druva

Druva Cloud Administrator

A Druva Cloud Administrator is a super administrator account manager who can:

  • Create additional Druva Cloud Administrator
  • Create product administrators
  • Use inSync services enabled for the account
  • Use Phoenix services enabled for the account
  • Configure and manage Single Sign-On (SSO)
  • Can login to Druva Cloud Platform Console without SSO (failsafe administrator privilege)
  • Enable or disable Geofencing
  • Enforce a Password Policy

Druva Cloud Administrators get all the rights of all the administrative roles across products, based on the services enabled for your account and the privileges needed to modify account settings.

inSync Administrator

For optimized use of Druva services, a Druva Cloud Administrator creates administrators to backup and restore data that resides on user endpoints such as laptops, desktops, and cloud apps like Microsoft 365. To prevent unauthorized account configuration and restrict access to user data, a Druva Cloud Administrator assigns roles that define the rights available to inSync administrators. inSync administrator roles are described below:

The following table lists the predefined administrator roles for each edition.

Note: Legal Hold Management rights can be assigned to any role.

Administrat

or Role

 Available in Description
Druva Cloud Administrator

Available for all the license types

Druva Cloud Administrator can configure Druva services (inSync and Druva) and has the privileges to set up and manage the product account, create another Druva Cloud Administrator and other administrators. Only a Druva Cloud Administrator can manage another Druva Cloud Administrator.

Also, a Druva Cloud Administrator inherits the privileges of the Cloud Administrator.
Cloud Administrator Available for all the license types

An administrator assigned to this role can perform all core inSync activities such as configuring, managing, and monitoring inSync. Cloud Administrators can create and manage other administrators and also manage another Cloud Administrator.

Cloud Administrators can configure a compliance policy. They can also place and view users on legal hold.
Workload Administrator Available for all the license types

An administrator assigned to this role can manage operations for a specific data source individually. 

For example, a Workload Administrator for the Endpoints data source will have rights only related to Endpoints. Similarly, a Data Source administrator for Microsoft 365 > Exchange Online, will have access to only Exchange Online and to no other workloads.
Data Protection administrator
  • Elite Plus (deprecated)
  • Elite
  • Enterprise

An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage data privacy and data access settings for the users.

The Data Protection administrator cannot place or view users on Legal Hold. 
Help Desk administrator  Available for all the license types

An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage day-to-day activities such as performing backup and restore operations, resetting passwords for the users, and addressing user complaints.

The Help Desk administrator cannot place or view users on legal hold.
Legal administrator
  • Elite Plus (deprecated)
  • Elite

An administrator assigned to this role can perform activities related to Legal Hold, such as creating and deleting {{legalhold}} policies, viewing users who are on legal hold, adding and removing users from legal hold, viewing and accessing backed up data, viewing, managing, and deleting Legal Hold clients. 
Profile administrator Available for all the license types

An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage users and devices, and backups and restores.

Profile administrators can access the Non-Compliant report only for the profiles that they are mapped to. However, they cannot view the compliance summary at the Sensitive Data Governance Dashboard, or configure a compliance policy.

Additionally, profile administrators cannot place or view users on legal hold.
Sensitive Data Governance administrator

Elite Plus (deprecated)

Or with the Sensitive Data Governance

An administrator assigned to this role has access to all pages of Sensitive Data Governance and they can define, edit, and delete policies, templates, and sensitive data and edit compliance settings. 

They also have access to inSync reports.
View Only administrator Available for all the license types

An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to view the inSync settings and user details. They also have access to inSync reports.

The View Only administrator cannot place or view users on legal hold.

Based on the administrator roles, rights are allocated to the administrators. For more information on roles and rights, see Predefined roles and rights. 

Phoenix Administrator

For optimized use of Druva services, a Druva Cloud Administrator can create Phoenix administrators to backup and restore data that reside on remote servers such as virtual machines and NAS devices. To prevent unauthorized account configuration, a Druva Cloud Administrator assigns roles to the Phoenix administrators that specify the rights available to them. Phoenix administrator roles are described below:

Administrator role Description
Cloud administrator An administrator with this role can create organizations, register servers under an organization, configure servers for backup and restore, and use Phoenix services to control data protection activities. 

Cloud administrators can create organization administrators and additional Cloud administrators.

Cloud administrators get all the rights available to the organization administrator.

Cloud administrators for Druva cannot access inSync services. 

Organization administrator

Organization administrators can register servers under the organization they are assigned to, and configure them for backup and restore. 

Organization administrators can create group administrators, additional organization administrators and can access dashboards, servers, and reports of the assigned organization. 

Group administrator

Group administrators have restricted access to the associated administrative groups.

They have necessary permissions for administrative group-related activities such as managing servers belonging to their administrative groups. 

One group administrator can manage multiple administrative groups. Similarly, more than one group administrator can manage a single administrative group.

Based on the administrator roles, rights are allocated to the administrators. For more information on roles and rights, see Predefined roles and rights.

Create New Administrator

 

  • It is recommended to have a secondary administrator within your organization at any given time to avoid service disruptions if one of the administrators cannot log in or is no longer with the company.
  • After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrator and Cloud administrator can reset the password of other administrators in your organization.

If you are a Druva, inSync, or Phoenix Cloud administrator, perform the following steps to create a new administrator:

  1. Launch a web browser and

  2. On the login page, enter the email ID and click Next. 

  3. If you have not configured SSO, enter the password to log on to Druva Cloud Platform Console. If you have configured SSO, you will be navigated to the identity provider page wherein you need to provide your credentials to log on to Druva Cloud Platform Console. 

  4. After login, go to Druva Cloud Platform Console Global Navigation > Manage Administrator.

  5. On the Administrators page, click New Administrator.

    • Creating a new Druva Cloud Administrator account: To create a Druva Cloud Administrator account:

      1. On the Create New Administrator page, provide Name, Email, Country, and Time Zone.

      2. In the Administrator Role section, select Druva Cloud Administrator and click Save.

    • Creating a new administrator for inSync account: To create an inSync administrator:

      1. On the Create New Administrator page, provide Name, Email, Country, and Time Zone.

      2. In the Administrator Role section, select Product Administrator->inSync.

      3. From the Roles drop-down list, select the role you intend to assign to the administrator. Based on the administrator roles selected, assign the workload, profile, and Legal Hold type to the administrator.

      4. Click Save.

  • You must assign at least one workload for the roles that have workloads associated with them.  Ensure that you have licenses for the workloads you are assigning.

  • You can assign a custom role (with both Legal Hold and Non-Legal Hold Management rights) to the administrator. After assigning a custom role, it is recommended to select at least one Legal Hold type to provide access to the Legal Hold types data.

For more information about creating an inSync administrator, see Creating an inSync administrator.

  • Creating a new administrator for Phoenix account: To create a Phoenix administrator:

    1. On the Create New Administrator page, provide Name, Email, Country, and Time Zone.

    2. In the Administrator Role section, select Product Administrator-> Phoenix.

    3. From the Roles drop-down list, select the role you intend to assign to the administrator.

    4. Click Save.

For more information about creating a Phoenix administrator, see Creating a Phoenix administrator.

After creating an administrator, an email will be sent to the specified email address, and the recipient can log in using the details mentioned in the email. 

Administrators Page

The administrator page lists the administrators in an account, and only a Druva, inSync, or Phoenix Cloud administrator can access this page. It provides filters to easily segregate the administrators based on their role and a search bar to let a user easily find administrators and their information. In addition, this page provides the New Administrator button to add administrators to the account.

You can click on an administrator and navigate to the administrator details page. From the administrator details page, you can edit administrator settings such as name, country, time-zone, rights, and roles. You can also reset the password for the administrator and delete the administrator. 

Details Page

To access the Administrators details page:

  1. Go to Druva Cloud Platform Console Global Navigation> Manage Administrators. 
  2. Click on the administrator you want to see or update. The administrators details page appears that shows the information about the selected administrator.

To see your account details, click lhn.png > your user ID. For example,

SignOut.png

The administrator details page for Cloud administrators in Druva displays rights to access the Druva Cloud settings, however, the Cloud administrators cannot make any modifications to the Druva Cloud settings.

Summary

Provides administrator information such as the email ID, country, time-zone, administrator role, and who added the user as an administrator.

inSync rights

For Druva Cloud Administrators, all inSync rights are available, the administrator can use all profiles, and has access to all Legal Hold policies. However, rights are disabled for administrators in inSync with different roles. For example, administrators with role specified as View Only cannot access profiles. For more information, see Predefined roles and rights. Few rights are exclusive to Cloud Administrators and Legal Administrators.  If the role in the summary section is defined as Cloud Administrator, Phoenix rights sections are not available for the administrator. 

Phoenix rights

For Druva Cloud Administrators, all Druva rights are already available and the role is Cloud Administrator. Druva Cloud Administrator can access all organizations and use all Druva services enabled for the account. However, access control only shows the organization allocated to the administrator if the administrator's role is specified as Organization administrator. 

If the role in the summary section is defined as Cloud Administrator, inSync rights sections are not available for the administrator. 

Edit

Use the Edit button to change details such as name, country, time-zone, rights, and roles. Options to change the details are based on the rights available to the administrator who can access the details page.

Change Password

To change the password associated with your account, do the following steps:

  1. Click the Change Password button. The Change Password window appears.
  2. In the Enter current Password box, type your current password.
  3. In the Enter new Password box, type your new password.
  4. In the Re-enter new Password box, type the same password that you provided in step 3.

    Note: The password can be only changed in accordance with the Password Policy configured for your organization.  

  5. Click Ok.

Filter Administrators based on the last login

Administrators filters help you to monitor product-specific administrators and audit the Last logins for the administrators to uncover any security risks.

Filters for Administartors.png

Filters Description
Product

Select the product to filter the list of administrators associated with it.


For example, if you select inSync, all the administrators you have created for inSync are listed.
Last Login Before

Select  the duration to filter administrators who didn’t log in during that duration. 

For example, if you select 7 days, all the administrators who didn’t login in the last 7 days are listed. 

You can select the duration:

  • 7 days 
  • 30 days
  • 60 days
  • 90 days - Maximum 
  • Never-logged-in

Reset Password

After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud administrators can reset the password of other administrators in your organization.

To reset the password associated with the other administrator's account, do the following steps: 

  1. Go to Druva Cloud Platform Console Global Navigation> Manage Administrators.
  2. Click the administrator for whom you want to reset the password.
  3. Click Reset Password.
  4. Click Yes in the message window displayed. Druva Cloud Platform Console sends an email to the administrator, with the necessary details to reset the password.

 

 

An email containing a link to reset the password is sent to the administrator and is valid for 24 hours only. If the password link expires before the password is reset, the administrator can resend the invitation email.