Data Protector Express Management Domains And Security - HP BB118BV - StorageWorks Data Protector Express Package User Manual

Express. Choosing a Data Protector Express management domain is simply a way to select which catalog
you wish to use.
Each Data Protector Express management domain is overseen by a Data Protector Express
administrator. It is the Data Protector Express administrator's job to manage the security and integrity of
the files in his or her Data Protector Express management domain.
You can switch to a different domain each time you log on to Data Protector Express. You can also set
up domains from the Data Protector Express Login screen.
In the Host Name field, enter the hostname or IP address of the machine on which the Data Protector
Express management master server is located, then select OK.
When you edit a domain, you cannot edit the master server name.
Data Protector Express management domains also help ensure network security. Data Protector Express
uses Data Protector Express management domains to promote security in two ways: first, by preventing
users from working with more than one Data Protector Express management domain at a time and,
second, by allowing file or application servers and PC desktops to be the member of only one Data
Protector Express management domain. For more information, see Chapter 12 – Advanced Permissions
and Security on page 174.
Note the following about machines, users, and Data Protector Express management domains:
File or application servers and PC desktops can only be the member of one—and only one—Data
•
Protector Express management domain. Because these machines belong to only one catalog, their
peripherals, such as disk drives and backup devices, can belong to only one catalog.
Backup media created in one Data Protector Express management domain cannot be used in another
•
Data Protector Express management domain without following special procedures (e.g., importing
media created on one Data Protector Express management domain into the Data Protector Express
catalog of another Data Protector Express management domain). This ensures that there is no
improper access to secure files and data.
Each Data Protector Express management domain must have at least one backup device , such as a
•
virtual library, tape library or CD device. This backup device can belong to only one Data Protector
Express management domain; it cannot be shared among multiple storage domains. However, a Data
Protector Express management domain could have multiple backup devices.
From one PC desktop, users can work in other Data Protector Express management domains besides
•
the storage domain to which their PC desktop belongs. This means they can administer jobs remotely
for other Data Protector Express management domains besides the storage domain to which their PC
desktop belongs. They cannot, however, work in more than one Data Protector Express management
domain at the same time.
Users can work from other machines with other Data Protector Express management domains besides
•
the one to which their machine belongs. Their machine, along with its drives, peripherals and
accompanying data, however, always remain in a single Data Protector Express management domain.
That is, the data on their machine is always backed up and restored within a single Data Protector
Express management domain. This helps to prevent the unauthorized sharing of data between Data
Protector Express management domains that would occur if someone in a different storage domain
were able to restore your data to their machine. Thus while users can work outside of their storage
domain, the PC desktops and file or application servers they use always remain a part of the Data