Configuring Security for a Recovery Group

You can associate users or groups with roles to determine what actions users can perform. You can also assign users or groups as owners who have management permissions for those entities.

You can use predefined roles, modify predefined roles, or create new roles.

Users and associations created prior to recovery are disabled in the recovered control plane. After the control plane is recovered, additional users cannot be created.

Procedure

1. From the navigation pane, go to Cleanroom > Recovery groups.

   The Recovery groups page appears.

2. Click the recovery group.

   The recovery group details page appears.

3. On the Configuration tab, in the Security section, click the edit button .

   The Security dialog box appears.

4. To create a security association between a user or user group and the recovery group that allows you to perform data management operations, do the following:

   1. On the Associations tab, enter the name of the user or user group.

   2. From the Roles list, select the role to assign, and then click Add.

5. To specify who can access the recovery group, do the following:

   1. Click the Owners tab.

   2. Enter the name of the user or user group to assign as an owner.

   3. Click Add.

6. To specify permissions (such as add, edit, or delete) to owners of the recovery group, do the following:

   1. Click the Permissions tab.

   2. Select the permissions.