# Enabling or Disabling Root Access on Commvault Flex Appliance

On new installations of a Commvault Flex Appliance cluster, password-based root access is disabled by default to enhance security. When root access is disabled, only the cvbackupadmin user can log in and access the nodes.

Some administrative or troubleshooting operations may require root access. In such cases, you can temporarily enable root access for all nodes in a storage pool, perform the required operation, and then disable root access once the task is complete.

When root access is enabled, it is automatically disabled after 24 hours, reducing the risk of prolonged privileged access. Root access can also be disabled manually at any time.

Use the VaultOS Node Root Access workflow in the Command Center to enable or disable root access in a controlled and auditable manner.

Note

When root access is disabled, SSH and console login using the root user are prohibited.

## Before You Begin

- If the workflow is not already available, download and deploy it from the Commvault Store.
  For instructions on managing workflows, see Managing Workflows. For instructions on managing workflows, see Managing Workflows.

## Procedure

1. From the Command Center navigation pane, go to Manage > Workflows.

2. Click VaultOS Node Root Access.

3. In the workflow dialog, select the required operation:

   - Enable – Enables password-based root access.
   - Disable – Disables password-based root access.

4. Click OK.

5. When prompted, select the Commvault Flex Appliance server for which you want to enable or disable root access.

6. Click DONE to submit the request.

## Approval Workflow

After you submit the request, the system sends a root access request for approval.

- For non-company users, a master user group member must approve the request.
- For company users, a tenant admin group member must approve the request.

Root access is enabled only after the approval is granted.

## What to Do Next

After completing the required troubleshooting or maintenance activity, it is recommended to disable root access using the same workflow to maintain system security.

×

Loading...