Enabling or Disabling Root Access for HyperScale X

Root access can be disabled on the Commvault HyperScale X nodes so that only the cvbackupadmin user can log on and access the nodes.

Note

When root access is disabled, ssh and console login will be prohibited.
After new installations of the Commvault HyperScale X cluster, password based root access is automatically disabled.
Some operations may require root access. In such situations, temporarily enable root access for all the nodes in the Storage Pool while performing the operation, and then disable root access once the operation is completed. When enabled, the root user access is automatically disabled after 24 hours.

Before You Begin

Create a restricted user with a limited set of capabilities (or commands) needed to administer the cluster.

From the navigation pane, go to Storage > HyperScale X.

The HyperScale page appears.
Click the hyperscale storage cluster to disable root access.

The hyperscale storage page appears.
In the Nodes section, for each node that you want to disable root access, click the action button , and then click Disable password-based root access.

Repeat the step from all the nodes in the storage pool.

If necessary, to enable root access click the action button , and then click Enable password-based root access. (This option will be available only when the root access is disabled.)

When you enable root access, the software automatically executes the Enable root access Authorization workflow that sends request to the administrators to approve root access to HyperScale storage pool. For a non-company user, the member of the master user group can approve the request. For a company user, the member of the tenant admin group can approve the request.

The following operations require root access on Commvault HyperScale X nodes: