> Software > CommCell Configuration > Security > Multi-Person Authorization to Minimize Insider Threat

Using the Default Deletion Operations in the Command Center

The multi-person authorization feature is enabled by default for deletion operations. This operation sends an authorization request email to the users in the approvers group. You can configure the users and user groups who can authorize the request from the Command Center.

The following are the default delete operations that trigger authorization request emails:

  • Delete Client Authorization: Sends an authorization email request to retire and delete the server from the Commcell or company level.

  • Delete Storage Policy Authorization: Sends an authorization email request to delete the storage policies that are associated with a plan.

  • Delete Storage Policy Copy Authorization: Sends an authorization email request to delete the storage policy copies that are associated with a plan.

  • Delete Library Mount Path Authorization: Sends an authorization email request to delete a library, a mount path, or a backup destination.

  • Delete Agent Authorization: Sends an authorization email request to retire or delete an agent.

  • Disable Compliance Lock: Sends an authorization email request to disable Compliance Lock option on storage.

Note:

  • By default, the users associated with the master group receive the approval request, and one approval is required.

  • The Disable Compliance Lock operation is hidden from user view by default and is managed by the Get and Process Authorization for approvals.

  • For Disable Compliance Lock, WORM Storage cannot be disabled. Disabling Compliance Lock requires an appropriate authorization code.

Procedure

  1. From the navigation pane, go to Developer tools > Workflows.

    The Workflows page appears.

  2. Under Workflow name, beside the default operation workflow, click the action button action_button > Configuration.

    The Configuration dialog box appears.

  3. Under Users who can authorize the request, select one or more users who will receive the authorization email request.

    Optionally, for Delete Client Authorization operation, specify the client group for which authorization is required.

  4. Under User groups which can authorize the request, select the user group to which the associated user will receive the authorization email request.

  5. Under Number of approvers, specify the number of users who must approve the request.

  6. Click OK.

Page contents

×

Loading...