Types Of Permission - HP BB118BV - StorageWorks Data Protector Express Package User's Manual & Technical Reference

Supervisor
This is the most powerful permission. Supervisor permission grants the user three specific abilities:
1.
A user with Supervisor permission to an object is automatically granted the other six permissions
to that object.
2. A user with Supervisor permission to an object automatically has effective permission to all
the objects in the catalog below that object.
3. A user with Supervisor permission to an object cannot be denied any of the seven permissions to
any object in the catalog below that object.
The Data Protector Express administrator is automatically granted Supervisor permission to the highest
container in the Data Protector Express catalog hierarchy called the System Container. This means that
the Data Protector Express administrator has full permissions to all the objects in the Data Protector
Express catalog and that none of these permissions can be denied.
Often, only the Data Protector Express administrator will be assigned Supervisor permission.
Access
A user with Access permission to an object can grant other users and groups permissions to that object.
For example, if you wish to grant a coworker permissions to a tape you have created, you must have Access
permission to that tape.
Access permission can be very powerful, since it allows a single user the ability to grant all other users
in the Data Protector Express catalog extensive permissions to an object. For this reason, your Data
Protector Express administrator may not grant you Access permission to objects even though you have
other permissions to them.
For example, your Data Protector Express administrator may grant you permission to read and write from
a particular tape. Without Access permission however, you will not be able to grant other users or groups
that same ability.
You can only grant permissions to other users or groups if you have Access permission. If you want other
users to have permissions to an object, such as a job or tape, and do not have Access permission to that
object, ask your Data Protector Express administrator to grant these users permissions for you.
Create
This permission allows a user to create new objects within a container object.
For example, to create a new job within a folder, a user must have Create permission to the folder.
Figure 152 Types of permission
User's Guide and Technical Reference
251