RBAC roles for TimeFinder SnapVX local and remote replication actions
A user must be assigned the necessary roles to perform TimeFinder SnapVX local and remote replication actions.
The following table details the roles that are required to perform TimeFinder SnapVX local and remote replication actions:
NOTE: Multiple Yesses imply that both are needed, for example,
Link Snapshot requires the user to have Local Replication rights on the snapshot device and Device Manager rights on the link device.
|
NOTE: Unisphere for PowerMax does not support RBAC device group management.
|
| Permissions | Local Replication | Remote Replication | Device Manager |
|---|---|---|---|
| Protection Wizard - Create SnapVx Snapshot | Yes (a) | No | No |
| Create Snapshot | Yes (a) | No | No |
| Edit Snapshot | Yes | No | No |
| Link Snapshot | Yes (b) (c) | No | Yes (d) |
| Relink Snapshot | Yes (b) (c) | No | Yes (d) |
| Restore Snapshot | Yes (b) | No | Yes (b) |
| Set Time To Live | Yes | No | No |
| Set Mode | Yes (b) | No | Yes (d) |
| Terminate Snapshot | Yes | No | No |
| Unlink Snapshot | Yes (b) | No | Yes (d) |
(a) - Set Secure is blocked for users who only have Local_REP rights.
(b) - The user must have the specified rights on the source volumes.
(c) - The user may only choose existing storage groups to link to. Creating a storage group requires Storage Admin rights.
(d) - The user must have the specified rights on the link volumes.