# Enabling or Disabling Root Access for Commvault Grid

You can enable or disable root access for a Commvault Grid node as needed.

When root access is disabled:

- Only the cvbackupadmin user can log in and access the nodes.

- SSH and command console login operations are prohibited for root user.

Note

- For new Commvault Commvault Grid cluster installations, password-based root access is automatically disabled.

- For operations requiring root access, you can temporarily enable it for all nodes in the storage pool. After the operation is completed, disable root access. When enabled, the root user access is automatically disabled after 24 hours.

## Before You Begin

Create a restricted user with a limited set of capabilities (or commands) needed to administer the cluster.

## Procedure

1. The Commvault Grid page appears.

2. Click the hyperscale storage cluster.

   The hyperscale storage page appears.

3. To disable root access, complete the following steps:

   1. In the Nodes section, locate the node for which you want to disable root access.

   2. Click the Action button , then select Disable password-based root access.

   Repeat these steps for all nodes in the storage pool.

4. To enable root access, complete the following steps:

   1. In the Nodes section, locate the node for which you want to enable root access.

   2. Click the Action button , then select Enable password-based root access.

   Repeat these steps for all nodes in the storage pool.

## What to Do Next

When you enable root access, the software sends a root access request for approval:

- Non-company users: A master user group member must approve the request.

- Company users: A tenant admin group member must approve the request.

×

Loading...