PowerProtect Data Manager 19.16 for Cyber Recovery User Guide

User roles

Cyber Recovery users are assigned roles that determine the tasks that they can perform in the Cyber Recovery vault environment.

The Cyber Recovery installation procedure creates the default Cyber Recovery security officer (crso) and assigns the security officer role to this user. The crso can be considered the superuser. There is only one crso per Cyber Recovery installation. The crso must perform the initial Cyber Recovery login and then create other users. Other user roles cannot modify or manage the crso. Users with the security officer role can create multiple security officers.

The Cyber Recovery user roles include:

• Dashboard—This role enables the user to view the Cyber Recovery dashboard but not perform tasks.
• Admin—This role enables the user to do the following:
  • Assets—Create and manage
  • Policies and associated objects—Create, manage, and run
  • Reports—Create, schedule, and run
  • Alerts—Acknowledge and add notes
  • Cyber Recovery vault—Manually secure
  • Password—Change for this user account
  • Multifactor authentication—Enable, disable, and configure for this user account
  • Log settings—Modify
  • Log bundles—Generate and delete
• Security officer—This role enables the user to do the following:
  • User accounts—Create, modify, enable, disable, and delete security officer, admin, and dashboard users
  • Passwords:
    • Reset dashboard, admin, and security officer user passwords
    • Change for this user account
    • Set the password policy to enhance protection and prevent unauthorized access
  • Multifactor authentication for an admin user—Disable
  • Mail server settings—Enable, configure settings, and manage allowable domains
  • Telemetry reports—Enable and configure the frequency and run date
  • Cyber Recovery vault—Manually secure and release (unsecure)
  • Log bundles—Generate and delete

  The security officer cannot modify, delete, enable, or disable multifactor authentication for the crso. If as the crso, you forget your password, use the crsetup.sh script to reset it. For instructions, see Resetting Cyber Recovery passwords.