Capabilities and Permitted Actions

Related Topics


The following table lists the operations that are available to a user who belongs to a user group that has a particular capability, and is given an association at a specific level in the CommCell Console. (The Associated CommCell Objects column lists the minimal level of CommCell Console object association a user needs to perform the function.)

To see the information in this table sorted by feature, see the Capabilities and Permitted Actions (by Feature) topic.

Capability

Associated CommCell Objects

Available Tasks/Operations

Administrative Management CommCell
  • 1-touch Boot CD-ROM for Mass Storage Recognition.
  • Set Activity Control from the CommCell Level.
  • Track the operations of users who have access to the CommCell and set or modify the Audit Trail settings.
  • Configure, download, and install software updates.
  • Run an auxiliary copy operation.
  • Add or modify the parameters available in the Control Panel (except for License Administration and Hardware Maintenance).
  • Migrate clients from one CommCell to another.
  • Modify CommServe properties.
  • Define custom calendars to suit the needs of your organization.
  • Run a Data Aging operation.
  • Configure Data Interface Pairs.
  • Perform a Data Verification operation.
  • Set the Database Space Check Interval.
  • Create a QR Volume. The associated object is the object from which the data protection operation is being initiated.
  • Configure and perform Disaster Recovery Backups.
  • Configure and perform an Erase Data by Browsing operation or Erase Stubs operation.
  • Create Global Filters.
  • Perform the following Job Management configuration functions:1
    • Set the job priority of an Agent.
    • Queue jobs.
    • Set the job update interval.
    • Determine if a job should be preemptible or restartable.
  • Configure and de-configure libraries and drives.
  • Change the name of a client.
  • Configure NAS clients.
  • Define Operation Rules at the CommCell level.
  • Perform the following functions for an Auxiliary Copy Schedule Policy:2
    • Create, clone, disable, and modify.
    • Run the schedules of the policy immediately.
    • View the storage policies and storage policy copies associated with the policy.
  • Schedule administration operations such as Data Aging, Auxiliary Copy, Disaster Recovery backup, Data Verification, Automatic Update, Erase Data by Browsing/Erase Stubs, Drive Cleaning, Vault Tracker Policy, and Report, run a scheduled task immediately, and be able to view, delete, disable, or modify the above schedules.3
  • Set Holidays.
  • Change media and network passwords, and also change user accounts.
  • Set the Automatically Add New Users to the View All group option.
  • Configure disk space utilization and search result display for each user.
  • Configure and perform Offline Content indexing
  • Delete Content Indexing Server.
  • Register Client from Client level.
  • Configure pre/post processes for Disaster Recovery Backup operations
  • Install an agent on the CommCell.11
  • Modify the following hardware maintenance settings:
    • Library Maintenance
    • Drive Maintenance
    • Media Expiration
    • Drive Cleaning Thresholds
  • Create/Edit/Delete a Billable Entity.
  • Assign Billable Entities to Subclient.
  • Create/Edit/Delete Cost Category.
  • Assign/un-assign storage resources to Cost Categories.
  • Run/Schedule SRM Report.
  • Delete SRM Report Schedule.
  • View SRM Report.
  • Delete Report Snapshot.
  • Schedule Policy
    • Create SRM Reports Schedule Policy.
    • Change the Association of an SRM Reports Schedule Policy.
  • Manage Resources.
  • Flexibility to select from Pre-configured and Custom reports.
  • Set Thresholds.
  • Detailed Report Views.
  • Configure File Categories for Reports.
  • Configure Time Categories for Reports.
  • Configure Top 'N' Category Counts for Reports.
Client
  • Create a client computer group.
  • Install an agent on the client in the CommCell.11
Client Computer Group
  • Set Activity Control from the Client Computer Group level.
  • Define Operational Window rules from the Client Computer Group level.
  • Modify/delete client computer group properties.
Agent Management Client
  • Set Activity Control from the Client level.
  • Define Operational Window rules from the Client level.
  • Modify and set the job priority for a client.
  • Set Data Encryption at the Client level.
  • De-configure a client.
Agent
  • Set Activity Control from the Agent level.
  • Modify and perform operations specific to an agent.
  • Enable software compression for an Agent.
  • Set Data Encryption at the Subclient level.
  • De-configure an agent.
  • Define operation rules at the Agent level.
  • Configure a pre/post process.
  • Add a pre/post process for data recovery operations.
  • Remove a pre/post process for data protection/archive operations.
  • Configure, activate, and deactivate snapshots.
  • Create a subclient policy with subclient association.4
  • Create a Replication Set.
  • De-configure SRM Agent.
Subclient
  • Set Activity Control from the Subclient level.
  • Enable global filters for a subclient.
  • Create data protection filters for a subclient.
  • Create/Delete/Modify a SRM Subclient.
  • Define Operational Window rules from the SRM Subclient level.
Backup Set
  • Create a new on-demand backup set.
  • Create, modify, and delete a backup set.
  • Create, modify, and delete a subclient.
  • Clone a subclient policy that retains the subclient association of the original policy.4
Instance/Partition
  • Create, modify, and delete an instance/partition.
Replication Set
  • Modify and delete a Replication Set.
  • Create, modify, and delete a Replication Pair.
Replication Pair
  • Delete a Replication Pair.
Agent Scheduling8 Agent, Backup Set, Instance/Partition/Subclient
  • Create, clone, and modify a Data Protection Schedule Policy.
  • Decouple a scheduled job from a schedule policy.
  • Run the schedules of a schedule policy immediately.
  • Associate a data protection schedule policy with a subclient.2
  • Add, modify, disable, delete, and view data protection operation schedules.
  • Add, modify, disable, delete, and view data recovery operation schedules.3
  • Schedule Data Collection Jobs at Agent and Subclient level.
Replication Set
  • Schedule the creation and back up of a Recovery Point.
Alert Management Client Computer Group, Client, Agent, Backup Set, Instance/Partition, Subclient, Library, MediaAgent, Storage Policy, Tracking Policy
  • Configure alerts for CommCell objects. The necessary associated object depends on the entity for which the alert is created.
  • Disable Advisories.
  • Add/Edit/Clone/Delete Thresholds.
Browse CommCell/Client group/Client/Agent/Backup Set/Instance/Partition/Subclient/Replication Set
  • Perform a browse operation at the appropriate levels.
  • View the list of media required for browse/data recovery operations.
  • Search CommCell domain for data related to any user on the associated object.
  • View backup job history/backup data.
Browse and In Place Recover Client/Agent/Backup Set/Instance/Partition/Replication Set
  • Restore Data Using a Map File and Restore by Jobs
    • If data is being recovered to the same destination as the original data protection operation.
    • If data is being recovered to a different destination than the original data protection operation.
  • Browse and recover to the same place as the original data protection operation. These operations include:
    • Copyback
    • Restore
    • Recovery
    • Retrieve
    • QR Recovery
  • Perform EZ restore operations.
  • Add a pre/post processes for data recovery operations.
  • Add, modify, disable, delete, and view data recovery operation schedules.3
  • Automatic and manual mount point creation for snapshots that comprise a Recovery Point for ContinuousDataReplicator.
  • Search CommCell domain for data related to any user on the associated object.
Browse and Out of Place Recover Backup Set, Replication Set, or Instance/Partition at the source client

and

Browse and In Place Recovery capability at the agent level of the destination client.

If the destination client is on a different platform than the source client (for example, a Unix File System client and a Windows File System client), then Browse and In Place Recovery with at least client level association at the destination client is needed.

  • Restore Data Using a Map File and Restore by Jobs
    • Source Client
  • Browse and recover to a different place than the original data protection operation. These operations include:
    • Copyback
    • Restore
    • Recovery
    • Retrieve
    • QR Recovery
  • Add a pre/post processes for data recovery operations.
  • Perform EZ restore operations.
  • Add, modify, disable, delete, and view data recovery operation schedules.3
  • Automatic and manual mount point creation for snapshots that comprise a Recovery Point for ContinuousDataReplicator.
  • Search CommCell domain for data related to any user on the associated object.
Compliance Search CommCell/Client group/Client/Agent/Backup Set Search CommCell domain for data related to any user on the associated object.
Data Protection Backup set
  • Run on demand data protection jobs.
  • Perform EZ backup operations.
Agent
  • Automatic File System Multi-Streaming
  • Perform EZ backup operations.
  • Remove a pre/post process for data protection/archive operations.
  • Run/Schedule Data Collection Jobs.
Backup Set, Instance/Partition, Subclient
  • Configure and perform archive operations.
  • Configure and perform the following data protection operations:5
    • Backups including synthetic fulls
    • Archives
    • Migrations
  • Perform EZ backup operations.
Agent, Backup Set, Instance/Partition

/Subclient

  • Perform EZ backup operations.
  • Add, modify, disable, delete, and view data protection operation schedules.3
  • Configure and perform Online Content Indexing
  • Run/Schedule Data Collection Jobs.
Replication Set
  • Create Recovery Point.
  • Back up Recovery Point.
Data Protection/Management Operations at the level for which the schedules were created. Agent, Backup Set, Instance/Partition

/Subclient

  • Create, clone, and modify a Data Protection Schedule Policy.
  • Decouple a scheduled job from a schedule policy.
  • Run the schedules of a schedule policy immediately.2
End User Search CommCell/Client group/Client/Agent/Backup Set
  • Search CommCell domain for data related to the logged in user with permissions to the user on the associated object.
  • Perform find, browse, restore, and Erase Data operations with the Outlook Add-In and Lotus Notes Client Add-Ins.
Job Management CommCell
  • Suspend, resume and kill selected jobs and groups of jobs.1
  • Change the job priority of a scheduled job, or running or groups of running jobs from the Job Controller.
  • Start a job in a suspended state.
  • Start/suspend/resume/abort Replication Sets.
  • Start/suspend/resume/abort Replication Pairs.
Library Management

NOTES

Library Management is a superior capability with critical library management rights, in addition to all the rights in Library Administration capability.

CommCell
  • Add or modify the Hardware Maintenance parameters in the Control Panel.
Library Perform the following functions:
  • Erase spare media.
  • Delete contents.
  • Overwrite Media options.
  • Create/delete or modify scratch pools.
  • Move media between scratch pools.
  • Reset library, library controller.
  • Full scan.
  • Mark library fixed.
  • Properties of library, master drive pool, drive pool, drive, and media.
  • Validate drive.
  • Mark a drive cleaned.
  • Mark a drive replaced.
  • Mark a drive fixed.
  • Clean drive.
  • Reset drive.
  • Unload drive.
  • Import media, cleaning media.
  • Load media.
  • Mark media full, bad, and appendable.
  • Mark media exported, prevent media export, export media.
  • Verify media.
  • Move media.
  • Delete media.
  • Update barcode.
  • Unload media.
  • Export media or schedule export media.10
  • Recall media
  • View contents.
  • Migrate magnetic library.
  • Inventory, Scheduled Inventory for Blind Library.
  • Stamp media in stand alone libraries.
Library Administration

 

CommCell
  • Add or modify the Hardware Maintenance parameters in the Control Panel.
Library Perform the following functions:
  • Create/delete or modify scratch pools.
  • Move media between scratch pools.
  • Reset library, library controller.
  • Full scan.
  • Mark library fixed.
  • Properties of library, master drive pool, drive pool, drive, and media.
  • Validate drive.
  • Mark a drive cleaned.
  • Mark a drive replaced.
  • Mark a drive fixed.
  • Clean drive.
  • Reset drive.
  • Unload drive.
  • Import media, cleaning media.
  • Load media.
  • Mark media full, bad, and appendable.
  • Mark media exported, prevent media export, export media.
  • Verify media.
  • Move media.
  • Delete media.
  • Update barcode.
  • Unload media.
  • Export media or schedule export media.10
  • Recall media
  • View contents.
  • Migrate magnetic library.
  • Inventory, Scheduled Inventory for Blind Library.
  • Stamp media in stand alone libraries.
License Management CommCell
  • Add or modify the License Administration parameters in the Control Panel.
MediaAgent Management CommCell
  • De-configure the MediaAgent CommCell object.
MediaAgent
  • Modify MediaAgent properties including the Index Cache, and perform MediaAgent operations.
  • Change the name of a MediaAgent.
  • Access Library and Drive Configuration window to configure or deconfigure libraries and drives.*
  • Create, modify, and delete storage policies and storage policy copies using libraries associated with a MediaAgent.*
  • Add data paths to a MediaAgent.*

* Activated by CheckUserMediaAgentRights QScript contact your Software Provider to enable this feature.

Report Management CommCell
  • Run CommServe reports.6
None
  • Run a Job, Storage, or Vault tracker report and schedule all reports.
Storage Policy Management Storage Policy
  • Configure a storage policy copy for alternate data paths, and delete data paths from the copy.
  • Enable Hardware Compression for a data path from a storage policy copy to which the data path is associated.
  • Configure a storage policy copy for data multiplexing.
  • Configure a storage policy copy for data verification.
  • Modify a storage policy or storage policy copy.
  • Enable an Incremental Storage Policy.
  • Prune, disable, and manually retain a data protection operation on a copy.
  • Set Inline Copy.
  • Combine the data streams of a storage policy copy.
CommCell
  • Create and delete storage policies and storage policy copies.
  • Create and delete storage policy copies, including inline copies.
  • Migrate media.
User Management CommCell
  • Add, delete, and modify a CommCell user.
  • Add, delete, and modify a user group.
  • Associate/disassociate a user group to a CommCell object.
  • Configure Single Sign On.
VaultTracker Operations CommCell
  • Add, delete, and modify any of the following objects or operations:
    • Actions
    • Containers
    • Export Media from Backup/Auxiliary Copy Operations
    • Export Media using the Export Media Wizard
    • Iron Mountain ID
    • Library
    • Location
    • Media Repository
    • Recall Media
    • Tracking Policy
    • VaultTracker Alerts
    • VaultTracker Reports9
Actions, Containers, Iron Mountain ID, Library, Location, Media Repository, Tracking Policy, VaultTracker Alerts Modify any of the following objects:
  • Actions
  • Containers
  • Iron Mountain ID
  • Library
  • Location
  • Media Repository
  • Tracking Policy
  • VaultTracker Alerts
NOTES
1
  • When performing an action on multiple jobs in the Job Controller, the correct capability and object association for all of the selected jobs is necessary.
  • If a user does not have the correct capability, then the group action cannot be performed on any of these jobs.
  • A user must have the correct capability and object association before attempting to control groups of jobs in the Job Controller.
  • The user who initiated a job can perform Job Controller functions for that job regardless of capability or object association.
2 Only a user who created the schedule policy or a user who is associated with all of the objects associated with the schedule policy can change the schedule pattern.
3 The user who created the schedule can also view it without any capability or object association.
4 Any user can create a subclient policy that does not have any subclient association.
5 The associated object is the object from which the data protection operation is being initiated.
6

To generate the Job Schedule Report, a user must be a member of the Master User Group or have Report Management capability, and have the capability to view schedules in the CommCell Console.

7 The function of viewing log files does not require security.
8 This operation also requires the Data Protection/Management Operations, Browse and In Place Recover, and Browse and Out of Place Recover capabilities respectively for Data Protection and Data Recovery Schedule.
9
  • This operation also requires the Report Management capability.
  • Only information about objects available with the user's current VaultTracker Operations capability level are displayed in the report.
10 Users who are not a member of the View All User Group would not be able to view/browse the export locations. However, they can manually enter the export location and successfully complete the export operation.
11 This operation requires this capability only when the Authentication for Agent Installs feature is enabled.


Back To Top