We've transitioned to a new documentation portal to serve you better. Access the latest content by clicking here.
This topic describes the different types of administrators and privileges, and how to manage your Druva account.
This section provides information about the types of administrators. For more information about administrators, see Key concepts and terms.
Administrator type | Description |
---|---|
Cloud Administrator for Enterprise workloads |
Cloud Administrator for Enterprise workloads have the privileges to configure and monitor the Druva setup and create another cloud, organization, and group administrators. Only a Cloud Administrator for Enterprise workloads can manage another Cloud Administrator for Enterprise workloads and also create organization administrators. A Cloud Administrator for Hybrid workloads gets all the privileges of an organization administrator. To access the Druva Dashboard as a cloud administrator:
In addition, a Cloud Administrator for Enterprise workloads gets all the privileges of an organization administrator. |
Organization administrator |
Organization administrators can manage one or more organizations assigned to them by the cloud administrator and can create and manage group administrators for organizations assigned to them.
To access the Organization Dashboard as an organization administrator:
In addition, organization administrators get all the privileges available to group administrators. |
Group administrator |
Group administrators have restricted access to the administrative groups with which they are associated. They have necessary permissions for administrative group-related activities such as managing servers belonging to their administrative groups. The cloud administrator and the organization administrator can change the administrative groups associated with group administrators. One group administrator can be assigned to manage multiple administrative groups. Similarly, a single administrative group can be managed by more than one group administrator. Notes:
|
Data protection officer |
A data protection officer (DPO) has the privilege to configure audit trails, alerts, and reports.
|
View-only administrator |
The view-only administrators have read-only access to all configurations. However, they cannot perform any administration action on any entities on the Druva Cloud Platform Console. Druva provides the following view-only administrator roles.
|
This section provides information about how to create various administrators and manage the administrators. For more information about the administrators, see Key concepts and terms.
If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.
Cloud Administrator for Enterprise Workloads can perform activities such as configuring, managing, and monitoring Druva. Cloud administrators can also create other cloud, organization, and group administrators.
Procedure
When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:
"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."
If Management Console access is enabled, see Manage Druva administrators.
Perform the following steps to create different types of administrators in Hybrid Workloads. For more information about each role, see Manage administrator accounts.
Procedure
On the Create New Administrator page, provide Display Name, Email Address, Country, Time Zone.
Select Administrator Role as Product Administrator and then select the product Enterprise Workloads(Hybrid_AWS).
From the Roles dropdown, select the type of admin you want to create. For example, to create a cloud administrator, select Cloud Administrator, to create an organization administrator, select Organization Administrator, and so on. For more information about different types of administrators, see Manage administrator accounts.
Notes:
The Organization Administrator option will not be visible in the Role drop-down if organization is disabled.
The Organization Administrator (View-only) role will be visible in the drop-down only if organization is enabled.
When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:
"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."
Only a Druva Cloud Administrator can set a password policy for all the Enterprise Workloads administrator accounts.
At the time of setting the password policy, you can choose to:
For more information, see Enable Password Policy for Administrators.
Procedure
If Management Console access is enabled, see Manage Druva administrators.
If you are a cloud administrator, you can update administrator details.
Procedure
Field | Description |
---|---|
Name | The display name of the administrator. |
Country | The country where the administrator is located. |
Time Zone | The time zone of the country of location. |
Note: The time zone determines the following:
- The timestamps on the reports that the administrator receives.
- The timestamps on the jobs that the administrator views.
If Management Console access is enabled, see Manage Druva administrators.
If you are a cloud administrator, you can delete other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can delete group administrators.
Note: Druva does not send notifications for delete operations. You might want to consider informing the administrator whose account you deleted.
Procedure
If Management Console access is enabled, see Manage Druva administrators.
After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud Administrator for Enterprise workloadss can reset the password of other administrators in your organization.
Note: If SSO is enabled, the Reset Password button and the Change Password buttons are visible only to the Druva Cloud Administrators. You cannot reset the password of other admins as only Druva Cloud Administrators are allowed a Failsafe login. Other administrators must use the SSO password to log in.
If you are a cloud administrator, you can reset passwords for other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can reset passwords for group administrators. After you reset an administrator's password, Druva sends an e-mail with the new password to that administrator.
Procedure
The following table lists the responsibilities of the administrators. The organization administrators can manage entities belonging only to the organizations assigned by the cloud administrators. The group administrators can manage administrative group-related activities.
The administrator responsibilities table uses the following abbreviations:
Responsibility |
DCA |
CA |
OA |
GA |
CA (view) |
OA (view) |
GA (view) |
DPO |
---|---|---|---|---|---|---|---|---|
Monitor Druva on the Dashboard page |
||||||||
Manage reports |
||||||||
View audit trail |
||||||||
Manage audit trail | ||||||||
View backup policies |
||||||||
Create a backup policy |
|
|||||||
Modify existing backup policies |
||||||||
Delete backup policies |
||||||||
View content rule |
||||||||
Create content rule |
|
|||||||
Modify content rule |
||||||||
Delete content rule |
||||||||
Create an administrative group |
||||||||
|
||||||||
Register a server |
||||||||
Configure a server |
||||||||
Reconfigure a server |
||||||||
Enable and disable a backup set |
||||||||
Disable Phoenix Backup Store | ||||||||
Back up and restore a server |
||||||||
Delete a recovery point |
||||||||
Update a backup set |
||||||||
Delete a backup set |
||||||||
Create an administrator |
||||||||
Update administrator details |
||||||||
Add or remove administrative groups associated with a group administrator |
||||||||
Add or remove organizations associated with organization administrators | ||||||||
Reset administrator password |
||||||||
Delete administrators |
||||||||
Set password policy |
||||||||
Set up SSO |
||||||||
Add, install, and activate CloudCache |
||||||||
Configure CloudCache |
|
|||||||
Update CloudCache details |
||||||||
Decommission CloudCache |
||||||||
Delete CloudCache | ||||||||
Add and update CloudCache Data Volumes |
|
|||||||
Creating organizations |
||||||||
Access to all organizations |
||||||||
View storage usage |
||||||||
Disaster recovery | ||||||||
View a DR plan |
||||||||
Create a DR plan |
||||||||
Edit a DR plan |
||||||||
Delete a DR plan |
||||||||
Restore virtual machines for DR |
||||||||
Trigger failover |
||||||||
Trigger failback |
||||||||
Delete Druva AWS proxy |
||||||||
Delete AWS account |
This section contains instructions for updating your account details and your password.
This topic provides instructions for updating your account details.
Procedure
Field | Description |
---|---|
Display Name | Type a display name that you want to use. |
Country | Click the appropriate country. |
Time Zone | Click the time zone that you want to use for timestamps. |
Note: The time zone determines the following:
- The timestamps on the reports that administrator receives.
- The timestamps on the tasks that administrator views.
You must update your password, if:
Best practices for password updates
We recommend that you follow the following best practices while updating your password:
Procedure
33713