Supervisor; Access; Create - HP BB118BV - StorageWorks Data Protector Express Package User Manual

This is the most powerful permission. Supervisor permission grants the user three specific abilities:
First, a user with Supervisor permission to an object is automatically granted the other six
•
permissions to that object;
Second, a user with Supervisor permission to an object automatically has effective permission to all
•
the objects in the catalog below that object; and
Third, a user with Supervisor permission to an object cannot be denied any of the seven permissions
•
to any object in the catalog below that object.
The Data Protector Express administrator is automatically granted Supervisor permission to the highest
container in the Data Protector Express catalog hierarchy (called the System Container). This means that
the Data Protector Express administrator has full permissions to all the objects in the Data Protector
Express catalog and that none of these permissions can be denied.
Often, only the Data Protector Express administrator will be assigned Supervisor permission.
A user with Access permission to an object can grant other users and groups permissions to that object.
For example, if you wish to grant a co-worker permissions to a tape you have created, you must have
Access permission to that tape.
Access permission can be very powerful, since it allows a single user the ability to grant all other users in
the Data Protector Express catalog extensive permissions to an object. For this reason, your Data
Protector Express administrator may not grant you Access permission to objects even though you have
other permissions to them. For example, your Data Protector Express administrator may grant you
permission to read and write from a particular tape. Without Access permission however, you will not be
able to grant other users or groups that same ability.
You can only grant permissions to other users or groups if you have Access permission. If you want other
users to have permissions to an object, such as a job or tape, and do not have Access permission to that
object, ask your Data Protector Express administrator to grant these users permissions for you.
This permission allows a user to create new objects within a container object. For example, to create a
new job within a folder, a user must have Create permission to the folder. Note that the Create