The following sections provide context-sensitive help information related to this feature.
Entity Properties (Security tab)
Use this dialog box to:
-
Identify the users, user groups, and roles associated with this entity
-
Associate this entity with users, user groups, and roles
-
Disassociate this entity from users, user groups, and roles
-
Enable the Privacy feature (client level only)
-
Add owners (client level only)
-
Add owner permissions (client and client computer group levels only)
Prevent administrators from viewing or downloading your data (client level only)
Enable this privacy option to prevent users and administrators who are not client owners from seeing the data on the client. Only a client owner may access data protected on the client, for example, perform Browse and Restore, Find, and Reference Copy operations. When this check box is selected or cleared, you must enter your log on password in the Privacy Settings dialog box. Note: Before client owners can use the Privacy feature on their clients, the Control Panel Prevent admin access to user data check box must be selected. For information on the Control Panel setting, see Enabling Privacy at the CommCell Level.
User/User Groups
Displays the names of the users and user groups who have permissions on this entity. The users and user groups, the role, and the entity create the three-way security association.
Role
Displays the names of the roles that are associated with this entity. The users and user groups, the role, and the entity create the three-way security association.
Defined In
Lists the CommCell entity where the security association is defined.
Require Authentication for Agent Installation (CommServe level only)
Enable this option to prompt users for authentication for any agent installation on the CommCell.
Owner Permissions button (client computer group level only)
Click to assign permissions for the owners of clients in the client computer group.
Include Inherited Associations
Lists all of the inherited security associations that affect the entity. The inherited security associations are shown in a gray, italicized font and are applied to the entity indirectly through other entities in the hierarchy. For example, a security association applied at the CommCell level appears in a grey, italicized font when viewed from the client computer group level.
Add button
Click to create security associations for the entity.
Owners tab (client level only)
The users or user groups who can access this client computer through the CommCell Console and who can run Web Console browse and restore operations on this client.
Privacy Settings
Password
Your log on password must be entered when the Prevent administrators from viewing or downloading your data check box is selected or cleared. Leaving the Privacy Settings dialog box without entering a password keeps the Prevent administrators from viewing or downloading your data check box at its current setting.
Add Users and Groups
Use this dialog box to add users, user groups, and roles to an entity. The users and user groups plus the roles plus the entity create the three-way security association.
Domain
Filters the list of users and user groups by domain.
Name
The user ID or the user group name that can be associated with this entity. Domain users and user groups are displayed using this format: domain\user ID.
Full Name
The full name of the user.
Please select Role
Roles that can be associated with this entity. If none of the roles have the permissions you need, you can create a role by clicking Create Role, or you can add permissions without creating a role by clicking Custom Role.
Add Association
Use this dialog box to add entities and roles to users and user groups. The users and user groups plus the roles plus the entity create the three-way security association.
Entities
Displays the names of the entities that can be associated with this user or user group.
Match Case
If selected, only entities that match the case of the word typed in the Find box are searched.
Please select Role
Roles that can be associated with this user or user group. If none of the roles have the permissions you need, you can create a role by clicking Create Role, or you can add permissions without creating a role by clicking Custom Role.
Owner Permissions
If accessed from a client computer, use this dialog box to establish or change the permissions for the owners of this client computer.
If accessed from a client computer group, use this dialog box to establish or change the permissions for the owners of client computers in this client computer group.
You must have the User Management permissions in order to assign permissions to the client owners.
Permissions
Lists the permissions that can be add to or removed from the client owners. For information about features and their required permissions, see User Security Permissions and Permitted Actions by Feature.
Note:
-
When you assign permissions in a client computer group and notice that some appear dimmed, it means that those permissions were assigned at the CommCell level as system owner permissions (for all client owners).
-
When you assign permissions in a client computer and notice that some appear dimmed, it means that those permissions were assigned at the CommCell level and/or the client computer group level.
Show only selected
This option filters the list of permissions so that only selected permissions are displayed.
Owner Permissions
Use this dialog box to establish or change the permissions for all client owners. You must have User Management permissions in order to assign permissions at the CommCell level.
Note: Assigning owner permissions at the CommCell level assigns permissions universally to all client owners. When clients are added to this CommCell environment, they automatically inherit the permissions set at this level.
Permissions
Lists the permissions that can be added to or removed from the system owners. For information about features and their required permissions, see User Security Permissions and Permitted Actions by Feature.
Show only selected
This option filters the list of permissions so that only selected permissions are displayed.
Users Logged In
Use this dialog box to view the users that are currently logged into the CommServe through the CommCell Console or through the command line.
-
Login Name
The name of the user that is currently logged in.
-
Host Name
The host name of the client from where the user is logged in. .
-
Logged In
The time the user is logged into the CommServe.
-
Idle Time
The amount of time the user has been inactive.
-
Console Type
Indicates if the user has logged into the CommServe using the CommCell Console (GUI) or through the command line interface.
Refresh
Click to refresh the list of users that are currently logged in.
User Properties (General tab)
Use this dialog box to create user accounts or to change user account properties. User accounts are created for users who need to access the system. Each user requires their own account. When you create a user account, you can immediately assign the account to the available user groups or you can leave the account unassigned.
External Domain (available when an external user is added)
The external domain to which the external user belongs.
Select an external user (available when an external user is added)
The name of the external user.
User Name
The name that you want the user to type when he or she logs on to the system. The user name can be up to 32 characters and should not include trailing spaces.
Password (not available for external users)
The password that you initially assign to the user. The password can be up to 32 characters and should not include trailing spaces. Each user can change his or her own password. To set strength requirements for passwords, see Setting Strength Requirements for User Passwords.
Confirm Password (not available for external users)
A confirmation of the password.
Change Password (not available for external users)
Select this check box to change and confirm the user password. This field is not available for a new user.
Full Name
The real name of the person to whom the account is assigned. The full name can be up to 32 characters and should not include trailing spaces.
Email ID
The user's email address.
Description
Some descriptive information about the user, for example, a job title, department, or organization name.
Enabled
If selected, the user account is enabled, and the user can log on to the CommCell Console and utilize all assigned rights.
If cleared, the user account is disabled, and that user cannot log on to the CommCell Console, and also prevents that user from utilizing all assigned rights.
Age Password in n Days (not available for external users)
If selected, allows you to set the number of days for which the password is to remain valid. At the end of this period, the user is prompted to enter a new password for their account. A password age of one day means that the password expires at midnight of the present day.
If cleared, the user password never expires.
Inherit User Group Quota Settings
Select this option to be limited to the quotas set for groups the user is a member of.
Enforce File System Quota
Select this option to cause file system backups for clients owned by this user to be limited by the quota you set in the next field.
Disable data protection when quota usage exceeds
Set a number here if you have selected the Enforce File System Quota option above.
Inherit User Group Edge Drive Quota Settings
Select this option to inherit the Edge Drive quota setting for the groups the user is a member of.
Enforce Edge Drive Quota
Select this option to limit amount of space that a user can use on their Edge Drive repository.
Disable upload of new data when Edge Drive quota exceeds
Set a number here if you have selected the Enforce Edge Drive Quota option, above.
Link with Commvault ID
Select this option to link a Cloud Services Commvault ID to the CommCell user. When the linked user clicks any of the Software Store links in the CommCell Console, that user is automatically logged on to the Commvault Store. For information on the Commvault Store, see Commvault Store. For instruction on creating a , see Getting Access to the Cloud Services Website. You need the following Commvault ID credentials for the user you are linking:
-
Commvault ID
This is the user email address or user name associated with the Cloud Services account.
-
Password
This is the user password associated with the Cloud Services account.
Browse for External User
Use this dialog box to browse for users who are members of the external domain displayed in the New User Properties dialog box. You can search for users based on any of the following fields: Name, Full Name, Email, or Description.
User Properties (User Groups tab)
Use this dialog box to assign the selected user account to one or more user groups.
Available Groups
Lists the user groups of which the selected user account is not a member.
Member Groups
Lists the user groups of which the selected user account is a member. A user account can be a member of any number of user groups.
Create New User Group
Select this option to create a new user group. The current user can then be associated with this new user group.
User Properties (Associated Entities tab)
Note: All of the security associations that affect the user are listed. If the user is a member of a user group, the security associations applied to the user group are applied to the user and are shown in a gray, italicized font.
Entity Type
Displays the type of entities that are associated with this user, for example, Library. The user, the role, and the entities create the three-way security association.
Name
Displays the names of the entities that are associated with this user. The user, the role, and the entities create the three-way security association.
Role
Displays the names of the roles that are associated with this user. The user, the role, and the entities create the three-way security association.
Defined In
Lists the CommCell entity where the security association is defined.
User Group Properties (General tab)
Use this dialog box to specify the general properties of a user group.
To change the properties of a user group, you must have User Management permissions .
Name
The name of the user group.
Description
A description of the user group, such as an organization name.
Enabled
To enable the user group, select this check box.
To disable the user group, clear this check box.
When you clear this check box, the associations and the CommCell resources for this group are unavailable to the members of the user group.
Enforce Edge Drive Quota
To limit amount of space that a user can use on their Edge Drive repository, select this check box.
Disable upload of new data when Edge Drive quota exceeds
If you selected the Enforce Edge Drive Quota option, enter the limit of space to disable the upload of any new data.
Enforce File System Quota
To limit file system backups for clients that are owned by this external user by the quota that you specify in the Disable data protection when quota usage exceeds box, select this check box.
Disable data protection when quota usage exceeds
If you selected the Enforce File System Quota option, enter the limit of quota usage to disable the data protection.
Number of previous passwords you cannot reuse
Specify the number of previous passwords the user in the user group cannot reuse. For instructions to enable this option, see Enabling Password History.
User Group Properties (Members tab)
Use this dialog box to add or remove the member users to/from a new user group.
You must have User Management permissions to change the membership of a user group.
Available Members
Lists the user accounts that are not assigned to the user group.
Associated Members
Lists the user accounts that are assigned to the user group.
Create New User
Select this option to create a new user. This user can then be associated to the user group.
User Group Properties (Associations tab)
Entity Type
Displays the type of entities that are associated with this user group, for example, Library. The user group, the role, and the entities create the three-way security association.
Name
Displays the names of the entities that are associated with this user group. The user group, the role, and the entities create the three-way security association.
Role
Displays the names of the roles that are associated with this user group. The user group, the role, and the entities create the three-way security association.
Defined In
Lists the CommCell entity where the security association is defined.
Add
Click this option to associate entities and roles to the user group.
Edit
Click this option to change an existing association.
Remove
Click this option to delete an existing association.
User Group Properties (Search tab)
Use this dialog box to specify the CommCell users and user groups whose data can be searched. Note: This tab is available when a role with the Compliance Search permission is added to the user group.
Users whose data can be searched
Enter the Active Directory or Domino Directory user names whose data can be searched as domain\username.
User Groups whose data can be searched
Enter the Active Directory or Domino Directory groups whose data can be searched.
Add/Edit External Group (General tab)
Use this dialog box to create external domain user group accounts or change external domain user account properties.
User accounts are created for users who need to access the system. Each user requires their own account. When you create a user account, you can immediately assign the account to the available user groups or you can leave the account unassigned.
External Domain
The external domain to which the external group belongs.
External Group
The name of the external group.
Email ID
The user's email address.
Inherit User Group Quota Settings
Select this option to cause file system backups for clients owned by this external user to be limited by the quotas set for groups the user is a member of.
Enforce File System Quota
Select this option to cause file system backups for clients owned by this external user to be limited by the quota you set in the next field.
Disable data protection when quota usage exceeds
Set a number here if you have selected the Enforce File System Quota option, above.
Description
Some descriptive information about the user, for example, a job title, department, or organization name.
Add/Edit External Group (Associated Entities tab)
Entity Type
Displays the type of entities that are associated with this external group, for example, Library. The external group plus the role plus the entities create the three-way security association.
Name
Displays the names of the entities that are associated with this external group. The external group plus the role plus the entities create the three-way security association.
Role
Displays the names of the roles that are associated with this external group. The external group plus the role plus the entities create the three-way security association.
Edit External Group (User Groups tab)
Available CommCell Groups
The list of available user groups that can be associated with the external user group.
Associated CommCell Groups
The list of user groups that are associated with the external user group.
Edit Security
User/User Groups
Displays the names of the users and user groups who have permissions on this user or user group. The users and user groups, the role, and the entity create the three-way security association.
Role
Displays the names of the roles that are associated with this user or user group. The users and user groups, the role, and the entity create the three-way security association.
Defined In
Lists the CommCell entity where the security association is defined.
Add/Edit Role
Name
The name of the role.
Description
Some descriptive information about the role, for example, a general descriptions of the permissions added to the role.
Enabled
If selected, the role is enabled. If cleared, the role is disabled. Disabled roles cannot be used to create security associations.
-
Permissions tab
The operations available to add to the role. For a list of permissions and their definitions, see Permissions.
Tip: If you do not see the permissions you need, clear the Show only selected check box in the upper right of the Permissions tab.
-
Associations tab
The list of security associations that use the role.
-
Security tab
This tab is available if security was enabled for roles. The list of users who can use the role to create security associations. For information on all of the permissions needed to create security associations, see User Security Permissions and Permitted Actions by Feature: Security Associations.