Using Groups To Handle Complex Security Needs; Selecting Files For Jobs; Selecting Files Not Previously Backed Up - HP BB118BV - StorageWorks Data Protector Express Package User Manual

If the user has a password and you do not know it, create an "alias" user and make it equivalent to the
user whose permissions you wish to check. Then log on as the alias user. Be certain to delete both the
alias user and its folder after verifying the effective permissions.
Set up groups and then make users members of them.
Some security arrangements can be very complex, with multiple users possessing differing levels of
effective permissions to different catalog objects. Setting up each user's permissions separately and
individually can be a complex and time consuming process.
You can use groups to speed up this process. Consider the following simplified example. Suppose you
want some users to have full permissions to a tape drive (that is, the ability to create new tapes, to
overwrite old tapes, to write backup tapes and read tapes for restore jobs), but want other users to have
limited permissions to the tape drive, for example, only the ability to write to backup tapes, but not
overwrite them.
Begin by creating two new groups. Name one group Users with Full Permission to Tape and assign this
group Create, Modify, Delete, Write and Read permissions to the tape drive. Name the other group
Users with Write Permission to Tape and assign this group Write permission to the tape drive. Next,
delete the corresponding User/Group folders that appear on the job views.
Then when you create new users, rather than individually assigning each user permissions to the tape
drive, make them members of the appropriate group.
You create as many groups as necessary, with varying levels of access to catalog objects such as media,
machines, volumes and directories. For example, you might create a group named Backup Permission to
Volume and another named Backup and Restore Permission to Volume, assigning to each the appropriate
permissions.

Selecting Files for Jobs

This section provides useful tips for selecting files.
Set the Version Range filter to At most 0.
Suppose you want to run a backup job that only selects files that have not been backed up previously.
You can use the Version Range filter to "filter out" any files that have been previously backed up.
Each time Data Protector Express backs up a file, it creates a new version of that file. If a file has not been
backed up, Data Protector Express has no versions recorded in the catalog for that file.
To select only files that have not been previously backed up, begin by clicking the Selection Filters
button on the toolbar of the Selection page. The Selection Filters dialog box will appear.
Click the Browse button next to the Version Range field. Set the Range Type to At most and then set
the Maximum versions field to 0. Data Protector Express will only select those files with no versions.
Note that this method does not ensure that you have the latest version of every file. Having a version of a
file does not ensure that the version you have reflects the latest changes to the file. It may have been
modified after the last time you backed it up and so your latest version may not match the file's current
form.