PowerProtect Data Manager 19.11 Cyber Recovery User Guide

User roles

Cyber Recovery users are assigned roles that determine the tasks that they can perform in the Cyber Recovery vault environment.

The Cyber Recovery installation creates the default crso user and assigns the Security Officer (crso) role to this user. The Security Officer user must perform the initial Cyber Recovery login and then create users. There is only one Security Officer per Cyber Recovery installation; you cannot create another Security Officer.

There are three Cyber Recovery user roles:

• Dashboard—This role enables the user to view the Cyber Recovery dashboard but not perform tasks.
• Admin—This role has the following permissions:
  • Create, modify, and disable dashboard users
  • Create, manage, and run policies and associated objects
  • Acknowledge and add notes to alerts
  • Change administrative settings
  • Modify own user account
  • Change own password
  • Manually secure and release (unsecure) the Cyber Recovery vault
• Security Officer—This role has the following permissions:
  • All Admin permissions
  • Create, modify, and disable users
  • Change and reset user passwords
  • Change the Security Officer password
  • Set the duration after which passwords expire for all users
  • Disable multifactor authentication for an Admin user
  • Configure the daily activity report
  • Configure the number of login sessions
  NOTE If as the Security Officer, you forget your password, use the crsetup.sh script to reset it. For instructions, see Resetting Cyber Recovery passwords.