RBAC roles for TimeFinder SnapVX local and remote replication actions

A user must be assigned the necessary roles to perform TimeFinder SnapVX local and remote replication actions.

The following table details the roles that are required to perform TimeFinder SnapVX local and remote replication actions:

NOTE: Multiple Yesses imply that both are needed, for example, Link Snapshot requires the user to have Local Replication rights on the snapshot device and Device Manager rights on the link device.
NOTE: Unisphere for PowerMax does not support RBAC device group management.
Table 1. Permissions for Local Replication, Remote Replication, and Device Management roles
Permissions Local Replication Remote Replication Device Manager
Protection Wizard - Create SnapVx Snapshot Yes (a) No No
Create Snapshot Yes (a) No No
Edit Snapshot Yes No No
Link Snapshot Yes (b) (c) No Yes (d)
Relink Snapshot Yes (b) (c) No Yes (d)
Restore Snapshot Yes (b) No Yes (b)
Set Time To Live Yes No No
Set Mode Yes (b) No Yes (d)
Terminate Snapshot Yes No No
Unlink Snapshot Yes (b) No Yes (d)

(a) - Set Secure is blocked for users who only have Local_REP rights.

(b) - The user must have the specified rights on the source volumes.

(c) - The user may only choose existing storage groups to link to. Creating a storage group requires Storage Admin rights.

(d) - The user must have the specified rights on the link volumes.