Manage administrator accounts

Last updated
Save as PDF
Share
1. Share

This topic describes the different types of administrators and privileges, and how to manage your Druva account.

Types of administrators
Create and manage the administrator account
Administrator responsibilities
Manage your Druva account

Types of administrators

This section provides information about the types of administrators. For more information about administrators, see Key concepts and terms.

Administrator type	Description
Cloud Administrator for Hybrid workloads	Cloud Administrator for Hybrid workloads have the privileges to configure and monitor the Druva setup and create another cloud, organization, and group administrators. Only a Cloud Administrator for Hybrid workloads can manage another Cloud Administrator for Hybrid workloads and also create organization administrators. A Cloud Administrator for Hybrid workloads gets all the privileges of an organization administrator. To access the Druva Dashboard as a cloud administrator: Click Enterprise Workloads on the menu bar, or Click All Organizations on the menu bar. In addition, a Cloud Administrator for Hybrid workloads gets all the privileges of an organization administrator.
Organization administrator	Organization administrators can manage one or more organizations assigned to them by the cloud administrator and can create and manage group administrators for organizations assigned to them. Notes: Only a cloud administrator can create organization administrators. Organization administrators cannot access the consolidated pages of all organizations. If you are an organization administrator in Native Workloads, you can manage all the accounts within an organization, as well as add additional organization and group administrators. To access the Organization Dashboard as an organization administrator: Click the icon. If you have multiple organizations registered to your name, the first organization is displayed. Or On the menu bar, select the required organization from the All Organization drop-down. In addition, organization administrators get all the privileges available to group administrators.
Group administrator	Group administrators have restricted access to the administrative groups with which they are associated. They have necessary permissions for administrative group-related activities such as managing servers belonging to their administrative groups. The cloud administrator and the organization administrator can change the administrative groups associated with group administrators. One group administrator can be assigned to manage multiple administrative groups. Similarly, a single administrative group can be managed by more than one group administrator. Notes: Group administrators will receive alert notification for only the associated administrative groups. If you are an account administrator in Native Workloads, you will now be a group administrator with access to a specific account or a group of accounts. Group administrators can modify accounts that they are the administrators for but cannot add new users on Native Workloads.
Data protection officer	A data protection officer (DPO) has the privilege to configure audit trails, alerts, and reports. Reporting And Alert Management: Privilege to configure audit trail and reports. Backup And Restore Management: Privilege to enable and disable backup, trigger backup, restore data to the original or alternate location, and delete the cold recovery points. DR Management: Privilege to launch failover and disaster recovery restore.
View-only administrator	The view-only administrators have read-only access to all configurations. However, they cannot perform any administration action on any entities on the Druva Cloud Platform Console. Druva provides the following view-only administrator roles. Cloud administrator (View-only): Privilege to view, download, and email all reports and audit trails for all the organizations. The administrators can also view the activities of all the organizations. However, they cannot perform any action on the entities of the Hybrid Workloads Management Console. Organization administrator (View-only): Privilege to view, download, and email all reports for the organization(s) they have access to. The administrators can also view the activities of the organizations. However, they cannot perform any action on the entities belonging to their organizations. Group administrator (View-only): Privilege to view the activities of the administrative groups they are associated with. However, they cannot manage any administrative group. They can also subscribe to alerts and reports.

Create and manage the administrator account

This section provides information about how to create various administrators and manage the administrators. For more information about the administrators, see Key concepts and terms.

It is recommended to have a secondary administrator within your organization at any given time to avoid service disruptions if one of the administrators cannot log in or is no longer with the company.
After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud Administrator for Hybrid workloadss can reset the password of other administrators in your organization.

Create a Cloud Administrator for Enterprise Workloads

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

Cloud Administrator for Enterprise Workloads can perform activities such as configuring, managing, and monitoring Druva. Cloud administrators can also create other cloud, organization, and group administrators.

Procedure

Log in to the Druva Cloud Platform Console.
Click > Scroll to the Administration section > Manage Administrators.
On the Administrators page, click New Administrator.

On the New Administrator page, provide Display Name, Email Address, Country, Time Zone, and select the Role as Druva Cloud Administrator.
Click Save.

When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:

"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."

Create product administrators for Enterprise Workloads

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

Perform the following steps to create different types of administrators in Hybrid Workloads. For more information about each role, see Manage administrator accounts.

Procedure

Log in to the Druva Cloud Platform Console.
Click > Scroll to the Administration section > Manage Administrators.
On the Administrators page, click New Administrator.

On the Create New Administrator page, provide Display Name, Email Address, Country, Time Zone.
Select Administrator Role as Product Administrator and then select the product Enterprise Workloads(Hybrid_AWS).
From the Roles dropdown, select the type of admin you want to create. For example, to create a cloud administrator, select Cloud Administrator, to create an organization administrator, select Organization Administrator, and so on. For more information about different types of administrators, see Manage administrator accounts.
Notes:
The Organization Administrator option will not be visible in the Role drop-down if organization is disabled.
The Organization Administrator (View-only) role will be visible in the drop-down only if organization is enabled.
Click Save.

When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:

"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."

Set a password policy

Only a Druva Cloud Administrator can set a password policy for all the Enterprise Workloads administrator accounts.

At the time of setting the password policy, you can choose to:

Enforce a strong password.
Set the number of previous passwords with which your new password must not match.
Set the number of invalid login attempts allowed.
Set the number of days after which the administrator password expires.

For more information, see Enable Password Policy for Administrators.

Procedure

Update the administrator details

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

If you are a cloud administrator, you can update administrator details.

Procedure

Log in to the Hybrid Workloads Management Console.
Click > Scroll down to the Administration section > Manage Administrators.
On the Administrators page, click on the administrator for whom you want to update details.
Click Edit.

Provide the following details.

Field	Description
Name	The display name of the administrator.
Country	The country where the administrator is located.
Time Zone	The time zone of the country of location.

Note: The time zone determines the following:

The timestamps on the reports that the administrator receives.

The timestamps on the jobs that the administrator views.

Click Save.

Delete an administrator account

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

If you are a cloud administrator, you can delete other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can delete group administrators.

Note: Druva does not send notifications for delete operations. You might want to consider informing the administrator whose account you deleted.

Procedure

Log in to the Hybrid Workloads Management Console.
Click > Scroll down to the Administration section > Manage Administrators.
Click the administrator that you want to delete, and then click Delete.

Reset an administrator password

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud Administrator for Hybrid workloadss can reset the password of other administrators in your organization.

Note: If SSO is enabled, the Reset Password button and the Change Password buttons are visible only to the Druva Cloud Administrators. You cannot reset the password of other admins as only Druva Cloud Administrators are allowed a Failsafe login. Other administrators must use the SSO password to log in.

If you are a cloud administrator, you can reset passwords for other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can reset passwords for group administrators. After you reset an administrator's password, Druva sends an e-mail with the new password to that administrator.

Procedure

Log in to the Hybrid Workloads Management Console.
Click > Scroll down to the Administration section > Manage Administrators.
Click Reset Password.
Click Reset Password on the confirmation message.

Administrator responsibilities

The following table lists the responsibilities of the administrators. The organization administrators can manage entities belonging only to the organizations assigned by the cloud administrators. The group administrators can manage administrative group-related activities.

The administrator responsibilities table uses the following abbreviations:

DCA: Druva Cloud Administrator
CA: Cloud Administrator for Hybrid workloads
OA: Organization Administrator
GA: Group Administrator
CA (view): Cloud Administrator with view-only rights
OA (view): Organization Administrator with view-only rights
GA (view): Group Administrator with view-only rights
DPO: Data Protection Officer

Responsibility	DCA	CA	OA	GA	CA (view)	OA (view)	GA (view)	DPO

Monitor Druva on the Dashboard page
Manage reports
View audit trail
Manage audit trail

View backup policies
Create a backup policy
Modify existing backup policies
Delete backup policies

View content rule
Create content rule
Modify content rule
Delete content rule

Create an administrative group

Register a server
Configure a server
Reconfigure a server
Enable and disable a backup set
Disable Phoenix Backup Store
Back up and restore a server
Delete a recovery point
Update a backup set
Delete a backup set

Create an administrator
Update administrator details
Add or remove administrative groups associated with a group administrator
Add or remove organizations associated with organization administrators
Reset administrator password
Delete administrators
Set password policy
Set up SSO

Add, install, and activate CloudCache
Configure CloudCache
Update CloudCache details
Decommission CloudCache
Delete CloudCache
Add and update CloudCache Data Volumes

Creating organizations
Access to all organizations
View storage usage
Disaster recovery
View a DR plan
Create a DR plan
Edit a DR plan
Delete a DR plan
Restore virtual machines for DR
Trigger failover
Trigger failback
Delete Druva AWS proxy
Delete AWS account

Manage your Druva account

This section contains instructions for updating your account details and your password.

Update your account details

This topic provides instructions for updating your account details.

Procedure

Log in to the Hybrid Workloads Management Console.
At the top-right corner of the menu bar, click > click your username.
Click Edit.

On the Edit Administrator Details screen, provide the following details.

Field	Description
Display Name	Type a display name that you want to use.
Country	Click the appropriate country.
Time Zone	Click the time zone that you want to use for timestamps.

Note: The time zone determines the following:

The timestamps on the reports that administrator receives.

The timestamps on the tasks that administrator views.

Click Save.

Update your password

You must update your password, if:

Your password was reset.
The password policy for your Druva setup requires you to update your password periodically.

Best practices for password updates

We recommend that you follow the following best practices while updating your password:

The password should be alphanumeric.
The password should not be a dictionary word.
The password should not contain strings of consecutive numbers or alphabets.

Procedure

Log in to the Hybrid Workloads Management Console.
At the top-right corner of the menu bar, click > click your username.
Click Change Password.
Set a new password, and click Save.

33713