# Restricting Access to API and Commvault Console Applications

Applies to: MSP administrators, tenant administrators

You can remove access to specific applications for users and user groups. When you add users and user groups to your Commvault environment, they can access all the Commvault applications.

The applications are as follows:

- Command Center

- CommCell Console

- APIs

- Commvault NOW

## Procedure

1. From the Command Center navigation pane, go to Manage > Account > Security.

   The Security page appears.

2. Click the Users groups tile.

   The Users groups page appears.

3. Click the user group that you want to restrict application access for.

   The user group page appears.

4. On the Restricted consoles tile, click the Edit button .

   The Restricted consoles dialog box appears.

5. To not inherit restricted consoles from the parent entities, such as the CommCell or company, move the Inherit restricted console toggle key to the left .

   Note

   By default, the Inherit restricted console toggle key is enabled to inherit the restricted consoles from the parent entity.

6. From the Restricted consoles list, select the applications that you do not want the users to access.

   For example, when you select Mobile, users cannot access the Commvault NOW app.

## Results

Users of the user group can use their credentials to access the applications not selected in the Restricted consoles list. However, when users enter their credentials to access applications selected in the Restricted consoles list, a message states that access is not permitted.

×

Loading...