About Administrator Permissions; Adding New Users And Groups - HP BB118BV - StorageWorks Data Protector Express Package User's Manual & Technical Reference

Should access to certain functions be limited?
various users or groups. For example, each group might be responsible for its own daily backup jobs
and archive jobs. On the other hand, access to certain Data Protector Express features may need to be
limited. Users might be able to create tapes, for example, but not restore files to disk or delete files on
disk. Alternatively, you may want users to run jobs you create, but not create their own jobs.
The security needs of these situations can be addressed by carefully assigning users select permissions to
various objects in the catalog. For example, you might assign permission to write files to tapes, but not to
volumes, thus preventing restore jobs from running.

About administrator permissions

The most powerful user in any catalog is the Data Protector Express administrator. Because Data Protector
Express administrators are granted supervisor rights to the System Container, they have unlimited access
to all of the objects in the catalog. Any user who logs on as the Data Protector Express administrator will
have complete access to all of the files and machines on the catalog.
Your first security step should be to change the Data Protector Express administrator's password. Click
on the Security page. Select the Admin user. Select Change Password from the Security menu. Type
in the new administrator's password, enter it again to confirm and click OK. Do not continue until you
have changed this password.
The only difference between the Data Protector Express administrator (Admin) and other users is that
the Data Protector Express administrator has Supervisor rights to the root object in the Data Protector
Express hierarchy, that is, the System Container. You may also create additional Data Protector Express
administrators as well as rename the Admin user.
CAUTION:
Data Protector Express administrators have unlimited access to all of the objects in the catalog. Any user
who logs on as the Data Protector Express administrator will have complete access to all of the files
and machines on the catalog.
CAUTION:
Do NOT delete Admin unless you assign Supervisor or Access permission to the System Container
to another user.

Adding New Users and Groups

Generally, the first step to arranging the security system is to set up users and groups. You create new
users and groups on the Security page of the main Data Protector Express window. Use the New Object
option from the File menu, the New Object button or the shortcut (right-click) menu to create new users
and groups.
New user or group folders
Each time you add a new user or group to the Security page, Data Protector Express automatically
creates a new User/Group folder in the Home folder with the same name as the new user or group.
For example, if you create a new user, Data Protector Express creates a new User/Group folder My Folder.
The user or group is automatically assigned six permissions to their User/Group folder: Access, Create,
Modify, Delete, Write and Read. You can modify these permissions at any time using the Permissions
page of the new user or group property page.
258
Managing the Storage Domain
You may wish to distribute certain backup tasks to