Dell PowerProtect Cyber Recovery 19.14 Product Guide

User roles

Cyber Recovery users are assigned roles that determine the tasks that they can perform in the Cyber Recovery vault environment.

The Cyber Recovery installation procedure creates the default Cyber Recovery security officer (crso) and assigns the security officer role to this user. The crso can be considered the superuser. There is only one crso per Cyber Recovery installation. The crso must perform the initial Cyber Recovery login and then create other users. Other user roles cannot modify or manage the crso. Users with the security officer role can create multiple security officers.

The Cyber Recovery user roles include:

• Dashboard—This role enables the user to view the Cyber Recovery dashboard but not perform tasks.
• Admin—This role enables the user to do the following:
  • Assets—Create and manage
  • Policies and associated objects—Create, manage, and run
  • Reports—Create, schedule, and run
  • Alerts—Acknowledge and add notes
  • Cyber Recovery vault—Manually secure
  • Password—Change for this user account
  • Multifactor authentication—Enable, disable, and configure for this user account
• Security officer—This role enables the user to do the following:
  • User accounts—Create, modify, enable, disable, and delete security officer, admin, and dashboard users
  • Passwords:
    • Reset dashboard, admin, and security officer user passwords
    • Change for this user account
  • Password duration—Set the duration after which passwords expire for all users
  • Multifactor authentication for an admin user—Disable
  • Cyber Recovery vault—Manually secure and release (unsecure)

  The security officer cannot modify, delete, enable, or disable multifactor authentication for the crso. If as the crso, you forget your password, use the crsetup.sh script to reset it. For instructions, see Resetting Cyber Recovery passwords.