Permissions Concepts; Users And Groups - HP BB118BV - StorageWorks Data Protector Express Package User's Manual & Technical Reference

Permissions
In this chapter

• Permissions concepts

• Users and Groups

• Effective Permissions
• Types of Permission
• Examples of Permissions
• Granting Permissions to Other Data Protector Express Users
Overview
Security is an important issue when managing a network. One of the most important functions of the Data
Protector Express catalog is to handle security. The catalog prevents unauthorized users from working with
objects to which they have not been granted sufficient security permissions. To ensure only authorized
users can access sensitive data, Data Protector Express tracks the permissions of each user. The Data
Protector Express administrator can grant different types of permissions to various users to ensure the
security and integrity of the network data while efficiently implementing a productive backup program.
Permissions concepts
Before you can work with any object (directory, file, user, etc.) in the Data Protector Express catalog, you
must have effective permissions to that object.
Different types of permissions restrict what type of operations can be performed on an object.
For example, some permissions allow users to write to an object (such as a file, a storage media or a PC
desktop) or create new objects (such as folders or jobs). Sometimes a user is granted unlimited permissions
to an object or all objects. Usually, however, to protect the integrity of the data and for security reasons,
most users have only limited effective permissions to some (not all) of the objects in the Data Protector
Express catalog.
Maintaining the security of data on a network is the primary responsibility of the Data Protector Express
administrator. Because of this, the following section is only an overview of security and permissions. This
section will help the typical user understand how Data Protector Express handles security and permissions
so that you can work efficiently with your Data Protector Express administrator.
Users and Groups
The Data Protector Express administrator grants permissions to objects in the Data Protector Express
catalog to either a user or to a group. Individual Data Protector Express users have effective permission to
an object either as a user or as the member of a group. A group is a set of users that are all granted
permissions in the same way and at the same time.
For example, the Data Protector Express administrator may grant permission to read the files on specific
media to users individually, to a group of users or both to users and groups.
User's Guide and Technical Reference 245