Dual Approval for Retention and Copy Configuration Changes

Certain retention and copy configuration changes require dual approval to ensure data protection integrity.

By default, dual approval is enforced for retention reduction on Air Gap Protect (AGP) associated copies. To extend dual approval to other storage copies, enable the additional setting: nEnableDualAuthForReduceRetention. For instructions, see Settings

Operations That Require Dual Approval

The following changes to retention policies trigger dual approval:

Basic Retention Changes

  • Reducing basic retention days
  • Changing basic retention from infinite to a finite number of days
  • Reducing basic retention cycles

Extended Retention Rule Changes

  • Removing an extended retention rule
  • Reducing the number of days in an extended retention rule
  • Changing extended retention from infinite to a finite duration
  • Modifying extended retention rules, including:
  • Changing from All Fulls to any other Full rule
  • Changing from Hourly Full to any Full rule except All Fulls
  • Changing from Daily Full to:
    • Weekly Full
    • Monthly Full
    • Quarterly Full
    • Half Yearly Full
    • Yearly Full
  • Changing from Weekly Full to:
    • Monthly Full
    • Quarterly Full
    • Half Yearly Full
    • Yearly Full
  • Changing from Monthly Full to:
    • Quarterly Full
    • Half Yearly Full
    • Yearly Full
  • Changing from Quarterly Full to:
    • Half Yearly Full
    • Yearly Full
  • Changing from Half Yearly Full to:
    • Yearly Full
  • Selecting the spool copy option from any retention configuration
  • Reducing the number of snapshot recovery points
  • Switching from snapshot recovery points to basic retention
  • Switching from basic retention to snapshot recovery points

Additional Changes Requiring Dual Approval (Compliance Lock Enabled Copies)

For copies with Compliance Lock enabled (regardless of storage type), the following changes also require dual approval:

  • Changing the selective rule (for example, Monthly Full to Yearly Full)
  • Changing the source copy
  • Modifying the start date for copying jobs
  • Changing the type of full backup to copy (First Full or Last Full)
  • Disabling the copy

This dual approval mechanism ensures that critical changes affecting data retention and compliance are validated before being applied, reducing the risk of unintended data loss or policy misconfiguration.

×

Loading...