Capabilities and Permitted Actions (by Feature)

Related Topics

The following table lists the features with their required capability and the required association in the CommCell Console. The Associated CommCell Objects column lists the minimal level of CommCell object association a user needs, to perform the function.

To see the information in this table sorted by capability and associated CommCell object, see the Capabilities and Permitted Actions.

Feature

Description

Capability

Associated CommCell Objects
1-touch 1-touch Boot CD-ROM for Mass Storage Recognition Administrative Management CommCell
Activity Control Activity Control can be set from the following CommCell Levels:
CommCell Administrative Management CommCell
Client Computer Group Client Computer Group
Client Agent Management Client
Agent Agent Management Agent
Subclient Subclient
Advanced File System iDataAgent Options
On Demand Data Protection
Run on demand data protection jobs Data Protection/Management Operations Backup set
Create a new on-demand backup set Agent Management
Automatic File System Multi-Streaming Data Protection/Management Operations Agent
Restore Data Using a Map File and Restore by Jobs
If data is being recovered to the same destination as the original data protection operation Browse and In Place Recovery At least subclient level association at the source client.
If data is being recovered to a different destination than the original data protection operation
Source Client Browse and Out of Place Recovery At least backup set/instance association
Destination Client

(same platform as the source Client)

 Browse and In Place Recovery At least Agent level association
Destination Client

(different platform from the source Client)

 Browse and In Place Recovery At least Client level association
Agents Modify and perform operations specific to an agent. Agent Management Agent
Install an agent on the CommCell.11 Administrative Management

Installation

 CommCell, Agent
Alerts Configure alerts for CommCell objects. The necessary associated object depends on the entity for which the alert is created. Alert Management Client Computer Group, Client, Agent, Backup Set, Instance/Partition, Subclient, Library, MediaAgent, Storage Policy, Tracking Policy
Disable Advisories.
Add/Edit/Clone/Delete Thresholds.
Alternate Data Paths (GridStor) Configure a storage policy copy for alternate data paths, and delete data paths from the copy. Storage Policy Management Storage Policy
Archive Configure and perform archive operations. Data Protection/Management Operations Archive Set, Instance, Subclient
Configure offline archive options in Outlook Add-In. Local administrative privileges are required by users logged into the Outlook Add-In client. N/A
Audit Trail Track the operations of users who have access to the CommCell and set or modify the Audit Trail settings. Administrative Management CommCell
Automatic Updates/Upgrade Configure, download, and install software updates and upgrades. Administrative Management CommCell
Auxiliary Copy Run an auxiliary copy operation. Administrative Management CommCell
Backup Set Create, modify, and delete a backup set. Agent Management Backup Set
Browse Perform a browse operation at the following CommCell levels:
Client Browse Client
Agent Agent
Backup Set Backup Set
Instance/Partition Instance/Partition
Replication Set Replication Set
Subclient Subclient
Browse and In Place Recover Browse and recover to the same place as the original data protection operation. These operations include:
  • Copyback
  • Restore
  • Recovery
  • Retrieve
  • QR Recovery
 Browse and In Place Recover Client/Agent/Backup Set/Instance/Partition/Replication Set
Browse and Out of Place Recover Browse and recover to a different place than the original data protection operation. These operations include:
  • Copyback
  • Restore
  • Recovery
  • Retrieve
  • QR Recovery
 Browse and Out of Place Recover (Source Client)

Browse and In Place Recover (Destination Client)

 At least Backup Set or Instance/Partition at the source client/Replication Set

and

The Browse and In Place Recovery capability at the agent level of the destination client. If the destination client is on a different platform than the source client (for example, a Unix File System client and a Windows File System client), then Browse and In Place Recovery with at least client level association at the destination client is needed.
Browse Recoveries and Find Recoveries from Outlook and Lotus Notes using the DataArchiver Outlook Add-In and Lotus Notes Client Add-In Perform advanced message recovery operations such as find recoveries and browse recoveries from Outlook and Lotus Notes using the DataArchiver Outlook Add-In and Lotus Notes Client Add-In. End User Search CommCell
Content Indexing and Search    
  Configure and perform Offline Content Indexing Administrative Management CommCell
Search CommCell domain for data related to the logged in user with permissions to the user on the associated object. End User Search CommCell/Client group/Client/Agent/Backup Set
Search CommCell domain for data related to any user on the associated object. Compliance Search CommCell/Client group/Client/Agent/Backup Set
Delete Content Indexing server Administrative Management CommCell
Add/Modify Annotations to discovered items. Annotation Management CommCell/Client group/Client/Agent/Backup Set
  • Create/Modify/Delete ERM Connectors.
  • Submit documents to ERM Server through ERM Connector.
 ERM Management CommCell/Client group/Client/Agent/Backup Set
  • Create/Modify/Delete Legal Holds.
  • Add search items to Legal Hold.
  • Retrieve data from Legal Hold
 Legal Hold Management CommCell/Client group/Client/Agent/Backup Set
  • Create/Modify/Delete Tags.
  • Associate/Dissociate Tags to discovered items.
 Tag Management CommCell/Client group/Client/Agent/Backup Set
Client Perform the following functions for a client:
  • Register a client from the client level
 Administrative Management CommCell
  • Modify
  • Set the job priority
 Agent Management Client
  • Create an Oracle RAC client.
  • Create a DB2 DPF pseudo-client.
 Agent Management Client
Client Computer Group Perform the following functions for a client computer group:
  • Create a client computer group
 Administrative Management Client
  • Modify/Delete client computer group properties
 Client Group or CommCell
Control Panel Add or modify the parameters available in the Control Panel.
License Administration License Management CommCell
Display No capability required
All other Administrative Management CommCell
Quick Launch See EZ Backup and Restore.
CommCell Migration Migrate clients from one CommCell to another. Administrative Management CommCell
CommServe Modify CommServe properties. Administrative Management CommCell
Custom Calendar Define custom calendars to suit the needs of your organization. Administrative Management CommCell
Data Aging Run a data aging operation. Administrative Management CommCell
Data Collection Perform Data Collection operations at the following CommCell Levels:
Agent Agent Management Agent
Subclient Agent Scheduling Subclient
Data Compression Enable software compression for the Agent. Agent Management Agent
Enable hardware compression for a data path from a storage policy copy to which the data path is associated. Storage Policy Management Storage Policy
Data Encryption Set Data Encryption at the following CommCell Levels:
Client Agent Management Client
Subclient Agent
Data Interface Pairs Configure data interface pairs. Administrative Management CommCell
Data Multiplexing Configure a copy for Data Multiplexing. Storage Policy Management Storage Policy
Data Protection5 Configure and perform the following data protection operations:
  • Backups including synthetic full backups
  • Compliance Archiving
  • Migration Archiving
 Data Protection/Management Operations Backup Set/Archive Set, Instance/Partition, Subclient
  • QR Volume Creation
 Administrative Management CommCell
Data Verification Perform the following data verification functions:
  • Perform a data verification operation.
 Administrative Management CommCell
  • Configure a storage policy copy for data verification.
 Storage Policy Management Storage Policy
Database Space Check Interval Set the Database Space Check Interval. Administrative Management CommCell
Deconfigure De-configure the following CommCell Objects:
MediaAgent MediaAgent Management CommCell
Client Agent Management Client
Agent Agent
Deployment
  • Interactive Install when the CommServe Authentication is available
  • Remote Install
  • Silent Install
  • Register a Client
 Administrative Management

Installation

 CommCell, Client
Uninstall Software using the CommCell Console
Disaster Recovery Backup Configure and perform Disaster Recovery Backups. Administrative Management CommCell
Erase Backup/Archived Data Configure and perform an Erase Data by Browsing or Erase Stubs operation. Administrative Management CommCell
Erase Backup/Archived Data from the DataArchiver Outlook Add-In Perform the following Erase Data operations from the DataArchiver Outlook Add-In:
  • Browse and Erase Data
  • Find and Erase Data
 End User Search

Administrative Management

 CommCell
Event Viewer Set the maximum number of events to be retained in the Event Viewer. No rights are required.
EZ Backup and Restore Perform EZ backup and restore operations.
EZ Backup Data Protection/Management Operations
EZ Restore Browse and In Place Recover

Browse and Out of Place Recover
Filters Perform the following filters functions:
  • Create Global Filters.
 Administrative Management CommCell
  • Enable global filters for a subclient.
  • Create data protection filters for a subclient.
 Agent Management Subclient
  • Enable CSVDE filtering for discovery operations.
 Agent Management Agent
Hardware Maintenance Modify the following hardware maintenance settings:
  • Library Maintenance
  • Drive Maintenance
  • Media Expiration
  • Drive Cleaning Thresholds
 Administrative Management CommCell
Index Cache See MediaAgent.
Instance/Partition Create, modify, and delete an instance/partition. Agent Management Instance/Partition
Job Management1
Perform the following Job Management configuration functions:
  • Set the job priority of an Agent.
  • Queue jobs.
  • Set the job update interval.
  • Determine if a job should be preemptible or restartable.
 Administrative Management CommCell
Perform the following Job Controller functions:
  • Suspend, resume and kill selected jobs and groups of jobs.
  • Change the job priority of a scheduled job, or running or groups of running jobs from the Job Controller.
  • Start a job in a suspended state.
 Job Management CommCell
Library and Drive Configuration Perform library and drive administration and management.
  Configure and de-configure libraries and drives. Administrative Management CommCell
  • Configure and de-configure libraries and drives associated with a MediaAgent.
  • Automatically add the user group (the user belongs) to the newly-configured libraries.
 MediaAgent Management

*To enable this task/operation, set the value of the Media Management configuration parameter Provide user with MediaAgent management rights additional capabilities for libraries, data paths, and storage policies to 1.

 MediaAgent
Perform the following functions:
  • Erase spare media.
  • Delete contents.
  • Overwrite Media options.
  • Create/delete or modify scratch pools.
  • Move media between scratch pools.
  • Reset library, library controller.
  • Full scan.
  • Mark library fixed.
  • Properties of library, master drive pool, drive pool, drive, and media.
  • Validate drive.
  • Mark a drive cleaned.
  • Mark a drive replaced.
  • Mark a drive fixed.
  • Clean drive.
  • Reset drive.
  • Unload drive.
  • Import media, cleaning media.
  • Load media.
  • Mark media full, bad, and appendable.
  • Mark media exported, prevent media export, export media.
  • Verify media.
  • Move media.
  • Delete media.
  • Update barcode.
  • Unload media.
  • Export media or schedule export media.10
  • Recall media
  • View contents.
  • Migrate disk library.
  • Inventory, Scheduled Inventory for Blind Library.
  • Stamp media in stand alone libraries.
Library Management

Library Management is a superior capability with critical library management rights, in addition to all the rights in Library Administration capability.

 Library
Perform the following functions:
  • Create/delete or modify scratch pools.
  • Move media between scratch pools.
  • Reset library, library controller.
  • Full scan.
  • Mark library fixed.
  • Properties of library, master drive pool, drive pool, drive, and media.
  • Validate drive.
  • Mark a drive cleaned.
  • Mark a drive replaced.
  • Mark a drive fixed.
  • Clean drive.
  • Reset drive.
  • Unload drive.
  • Import media, cleaning media.
  • Load media.
  • Mark media full, bad, and appendable.
  • Mark media exported, prevent media export, export media.
  • Verify media.
  • Move media.
  • Delete media.
  • Update barcode.
  • Unload media.
  • Export media or schedule export media.10
  • Recall media
  • View contents.
  • Migrate disk library.
  • Inventory, Scheduled Inventory for Blind Library.
  • Stamp media in stand alone libraries.
 Library Administration Library
License Add and update a license. License Management CommCell
List Media View the list of media required for browse/data recovery operations.
Client Browse Client
Agent Agent
Backup Set Backup Set
Instance/Partition Instance/Partition
Subclient Subclient
Log Files7 Send and view log files. No rights are required. CommCell
Saving log files to CommServe. Administrative Management CommCell
MediaAgent Modify MediaAgent properties including the Index Cache, and perform MediaAgent operations. MediaAgent Management MediaAgent
Name Change Client name change Administrative Management CommCell
MediaAgent name change Media Management MediaAgent
NAS Client Configuration Configure NAS clients. Administrative Management CommCell
Operation Window Operation Rules can be defined at the following CommCell levels:
CommCell Administrative Management CommCell
Client Computer Group Administrative Management Client Computer Group
Client Agent Management Client
Agent Agent Management Agent
Subclient Agent Management Subclient
Pre/Post Perform the following pre/post processes:
  • Configure
 Agent Management Agent
  • Add pre/post processes for data recovery operations
 Agent Management and the Browse and In Place or Browse and Out of Place Recover capability Agent
  • Remove a pre/post process for data protection/archive operations
 Agent Management and Data Protection/Management Operations Agent
  • Configure pre/post processes for Disaster Recovery Backup operations
 Administrative Management CommCell
QR Volume See Data Protection.
Recovery Point
  • Schedule the creation and back up of a Recovery Point.
 Agent Scheduling Replication Set
  • Create Recovery Point.
  • Back up Recovery Point.
 Data Protection/Management Operations
Reports6
  • Run CommServe reports
 Report Management CommCell
  • Run a Job, or Storage report and schedule all reports.
 None
Replication Pair
  • Delete a Replication Pair.
 Agent Management Replication Set
  • Start/suspend/resume/abort Replication Pairs.
 Job Management
Replication Set
  • Modify and delete a Replication Set.
  • Create, modify, and delete a Replication Pair.
 Agent Management Replication Set
  • Start/suspend/resume/abort Replication Sets.
 Job Management
Schedule Policy2 Perform the following functions for schedule policies:
Perform the following functions for an Auxiliary Copy Schedule Policy:
  • Create, clone, disable, and modify.
  • Run the schedules of the policy immediately.
  • View the storage policies and storage policy copies associated with the policy.
 Administrative Management CommCell
Perform the following functions for a Data Protection Schedule Policy:
  • Create, clone, and modify.
  • Decouple a scheduled job from a schedule policy.
  • Run the schedules of a schedule policy immediately.
 Agent Scheduling

and

Data Protection/Management Operations at the level for which the schedules were created.

 Agent, Backup Set, Instance/Partition

/Subclient
  • Associate a data protection schedule policy with a subclient.
 Agent Scheduling
Scheduling3 Perform the following functions related to scheduling:
  • Add, modify, disable, delete, and view data protection operation schedules.
 Agent Scheduling8

and

Data Protection/Management Operations

 Agent, Backup Set, Instance/Partition

/Subclient
  • Add, modify, disable, delete, and view data recovery operation schedules.
Agent Scheduling8

and

Browse and In Place Recover and/or Browse and Out of Place Recover
  • Schedule administration operations such as Data Aging, Auxiliary Copy, Disaster Recovery backup, Data Verification, Automatic Update, Erase Data by Browsing/Erase Stubs, Drive Cleaning, and Report, run a scheduled task immediately, and be able to view, delete, disable, or modify the above schedules.
  • Run a scheduled task immediately.
  • Set Holidays
 Administrative Management CommCell
Single Sign On Enable Single Sign On to use Active Directory credentials to access the CommServe as well. User Management CommCell
Snapshots Configure, activate, and deactivate snapshots. Agent Management Agent
SRM
  • Create/Edit/Delete a Billable Entity.
  • Assign Billable Entities to Subclient.
  • Create/Edit/Delete Cost Category.
  • Assign/un-assign storage resources to Cost Categories.
  • Run/Schedule SRM Report.
  • Delete SRM Report Schedule.
  • View SRM Report.
  • Delete Report Snapshot.
  • Schedule Policy
    • Create SRM Reports Schedule Policy.
    • Change the Association of an SRM Reports Schedule Policy.
  • Manage Resources.
  • Flexibility to select from Pre-configured and Custom reports.
  • Detailed Report Views.
  • Configure File Categories for Reports.
  • Configure Time Categories for Reports.
  • Configure Top 'N' Category Counts for Reports.
 Administrative Management CommCell
Storage Policy

Storage Policy Copy

 Perform the following storage policy functions:
  • Create and delete storage policies and storage policy copies.
  • Create and delete storage policy copies including inline copies.
  • Migrate media.
 Storage Policy Management CommCell
  • Modify a storage policy or storage policy copy.
  • Enable an Incremental Storage Policy.
  • Prune, disable, and manually retain a data protection operation on a copy.
 Storage Policy Management Storage Policy
Set Inline Copy Storage Policy Management Storage Policy
Create, modify, and delete storage policies and storage policy copies associated with a MediaAgent. MediaAgent Management

*To enable this task/operation, set the value of the Media Management configuration parameter Provide user with MediaAgent management rights additional capabilities for libraries, data paths, and storage policies to 1.

 MediaAgent
Streams Combine the data streams of a storage policy copy. Storage Policy Management Storage Policy
Subclient Policy5 Perform the following functions for a subclient policy:
  • Create a subclient policy with subclient association.
Agent Management Agent
  • Clone a subclient policy that retains the subclient association of the original policy.
 Agent Management Backup Set
Subclient Create, modify, and delete a subclient. Agent Management Backup set
Synthetic Full See Data Protection
User Accounts and Passwords Change media and network passwords. You can also change user accounts. Administrative Management CommCell
User Administration - Search Console Configure disk space utilization and search result display for each user. Administrative Management CommCell
User Administration and Security Add, delete, and modify a CommCell user. User Management CommCell
You can perform the following functions on a user group:
  • Add, delete, and modify.
  • Associate/disassociate a user group to a CommCell object.
 User Management CommCell
  • Set the Automatically Add New Users to the View All group option.
Administrative Management CommCell
NOTES
1
  • When performing an action on multiple jobs in the Job Controller, the correct capability and object association for all of the selected jobs is necessary.
  • If a user does not have the correct capability, then the group action cannot be performed on any of these jobs.
  • A user must have the correct capability and object association before attempting to control groups of jobs in the Job Controller.
  • The user who initiated a job can perform Job Controller functions for that job regardless of capability or object association.
2 Only a user who created the schedule policy or a user who is associated with all of the objects associated with the schedule policy can change the schedule pattern.
3 The user who created the schedule can also view it without any capability or object association.
4 Any user can create a subclient policy that does not have any subclient association.
5 The associated object is the object from which the data protection operation is being initiated.
6

To generate the Job Schedule Report, a user must be a member of the Master User Group or have Report Management capability, and have the capability to view schedules in the CommCell Console.
7 The function of viewing log files does not require security.
8 This operation also requires the Data Protection/Management Operations, Browse and In Place Recover, and Browse and Out of Place Recover capabilities respectively for Data Protection and Data Recovery Schedule.
9 This operation also requires the Report Management capability.
10 Users who are not a member of the View All User Group would not be able to view/browse the export locations. However, they can manually enter the export location and successfully complete the export operation.
11 This operation requires this capability only when the Authentication for Agent Installs feature is enabled.

Back To Top