Working With Permissions; Using Groups To Handle Complex Security Needs; Selecting Files For Jobs - HP BB118BV - StorageWorks Data Protector Express Package User's Manual & Technical Reference

machine, you should install 512MB of memory (32MB x 4 devices x 4) in that machine. If you have eight
devices on one machine, install 1GB of memory (32MB x 8 devices x 4) in that machine.
NOTE:
Use this as a guideline when attaching devices to each machine.

Working with Permissions

This section provides useful tips for assigning permissions.
Checking the effective permissions of a user
Log on as the user.
On complex installations with multiple users and groups and varying levels of security, a particular
user's effective permissions can be difficult to identify. The easiest way to identify a user's effective
permissions is to log on as that user.
If you have not yet assigned the user a password, simply log on as the user. Browse the various General
page of the objects in the catalog. Verify that the displayed effective permissions match your intended
security measures.
If the user has a password and you do not know it, create an "alias" user and make it equivalent to the
user whose permissions you wish to check. Then log on as the alias user. Be certain to delete both the
alias user and its folder after verifying the effective permissions.

Using groups to handle complex security needs

Set up groups and then make users members of them.
Some security arrangements can be very complex, with multiple users possessing differing levels of
effective permissions to different catalog objects. Setting up each user's permissions separately and
individually can be a complex and time consuming process.
You can use groups to speed up this process. Consider the following simplified example. Suppose
you want some users to have full permissions to a tape drive (that is, the ability to create new tapes,
to overwrite old tapes, to write backup tapes and read tapes for restore jobs), but want other users to
have limited permissions to the tape drive, for example, only the ability to write to backup tapes, but not
overwrite them.
Begin by creating two new groups. Name one group "Users with Full Permission to Tape" and assign
this group Create, Modify, Delete, Write and Read permissions to the tape drive. Name the other group
"Users with Write Permission to Tape" and assign this group Write permission to the tape drive. Next,
delete the corresponding User/Group folders that appear on the job views.
Then when you create new users, rather than individually assigning each user permissions to the tape
drive, make them members of the appropriate group.
You create as many groups as necessary, with varying levels of access to catalog objects such as
media, machines, volumes and directories. For example, you might create a group named Backup
Permission to Volume and another named Backup and Restore Permission to Volume, assigning to each
the appropriate permissions.

Selecting Files for Jobs

This section provides useful tips for selecting files.
300
Tips, Techniques and Strategies