You must configure the Web Console.
Procedure
- 
Use the following steps to specify that the external user group to which the user belongs has Group Scope defined as Global on the Active Directory domain:
- 
From the Windows Start menu, expand Start > Administrative Tools > Active Directory Users and Computers.
 - 
Right-click the external group, and then click Properties.
 - 
Under Group Scope, select Global.
 - 
Click OK.
 
 - 
 - 
From the CommCell Browser, expand Security > Domains > domain_name.
 - 
Right-click External Groups, and then click Add New Group.
The Add New External Group dialog box appears.
 - 
Click Browse.
The Select an External Group dialog box appears.
 - 
Select the external user group to which the user belongs, and then click OK.
The group name that you selected appears in the Select an External Group box.
 - 
To create a security association for the appropriate level of access, on the Associated Entities tab, click Add.
- 
To grant external users full access, select the CommCell entity and the Master role.
 - 
To limit external user access, select one of the following options:
- 
A role with permissions that matches the type of user.
User Type
Permissions Needed
End Users
- End User Access
 
Compliance Search Users
- 
Browse
 - 
Compliance Search
 - 
In Place Recovery (to restore data)
 
 - 
Client computers that users are allowed to browse.
Note
Select the entities at either the client level or the backup set level. Subclient-level browsing restrictions are not supported for the Web Console.
 
 - 
 
For instructions, see Administering the Security Associations of a User Group.
 - 
 - 
Click OK.
 - 
Click OK to close the Add New External Group dialog box.
 
Note: For end user access, the end user must log out of Web Console and log back in after the permissions have been set by the administrator.