Management Server Administrator Rights; User Privileges On A Storage Node - ACRONIS BACKUP AND RECOVERY 10 ADVANCED SERVER - UPDATE 3 User Manual

Tip: To ensure proper group names, you should install Acronis components in a domain controller after you have
set up the domain controller itself. If the components were installed before you set up the domain controller,
create the groups DCNAME $ Acronis Remote Users and DCNAME $ Acronis Centralized Admins manually, and
then include the members of Acronis Remote Users and Acronis Centralized Admins in the newly created groups.
2.14.7.6

Management server administrator rights

Normally, the Acronis Backup & Recovery 10 Management Server administrator operates on a
registered machine on behalf of the Acronis Managed Machine Service (also known as the Acronis
service) on that machine and has the same privileges as the service has.
Alternatively, when creating a backup policy, the management server administrator has the option to
explicitly specify a user account under which the centralized backup plans will run on the registered
machines. In this case, the user account must exist on all the machines to which the centralized
policy will be deployed. This is not always efficient.
To be a management server administrator, the user must be a member of the Acronis Centralized
Admins group on the machine where the management server is installed.
2.14.7.7

User privileges on a storage node

The scope of a user's privileges on Acronis Backup & Recovery 10 Storage Node depends on the
user's rights on the machine where the storage node is installed.
A regular user, such as a member of the Users group on the storage node, can:
 Create archives in any centralized vault managed by the storage node

View and manage archives owned by the user
A user who is a member of the Administrators group on the storage node can additionally:
 View and manage any archive in any centralized vault managed by the storage node
 Create centralized vaults to be managed by the storage node—provided that the user is also an
Acronis Backup & Recovery 10 Management Server administrator

Re-schedule the compacting task, as described in Operations with storage nodes (p. 325), under
"Change the compacting task schedule"
Users with these additional privileges are also called storage node administrators.
Recommendations on user accounts
To allow users to access the centralized vaults managed by a storage node, you must ensure that
those users have a right to access the storage node from the network.
If both the users' machines and the machine with the storage node are in one Active Directory
domain, you probably do not need to perform any further steps: all users are typically members of
the Domain Users group and so can access the storage node.
Otherwise, you need to create user accounts on the machine where the storage node is installed. We
recommend creating a separate user account for each user who will access the storage node, so that
the users are able to access only the archives they own.
When creating the accounts, follow these guidelines:
80 Copyright © Acronis, Inc., 2000-2010