Create and assign a Backup admin role

Please note that this Backup Admin role will give a user full access to any and all files and emails backed up to your cloud storage, with the ability to restore the data to their account (or another user). 

You can add the required permissions to any existing role. However, we recommend creating a new role so that you have more control over which users can create and assign policies, view stored data and restore, if required. 

 

To create a Backup admin role:

  1. Sign in to CloudM Automate, using an account with permission to manage other users.
  2. Select Settings > Roles.
  3. Click on Create New Role.
    • If you cannot see the Create New Role option, select the x button at the top of the screen.
  4. Set the Name of the new role to Backup Admin.
  5. Leave the Create from template checkbox unticked.
  6. Add a Description of the Backup Admin role, if required.
  7. Assign the Scope of the new role to Global to apply to the whole organization.
  8. Select Create New Role.
  9. The Backup admin role will now appear in the list of roles.
  10. Select the role from the list.
  11. On the Permissions tab, use the Add → button to move the following from the Unused Permissions column (on the left) into the Assigned Permissions column (on the right):
    • Edit Backup Config & Policies
    • Backup User Restoration & View Status
    • Backup Shared Drives Restoration & View Status
  12. The user will also need to be assigned a role that assigns permissions for managing Organizational Units and Smart Teams. These include (but are not limited to):
    • Manage OUs
    • Manage Smart Teams
    • Manage Smart Teams Priority
    • Manage Users
    • View OU Hierarchy
  13. Select Save to confirm the changes.

To create a Backup OU-scoped role:

  1. Sign in to CloudM Automate, using an account with permission to manage other users.
  2. 2.Select Settings > Roles.
  3. Click on Create New Role.
    • If you cannot see the Create New Role option, select the x button at the top of the screen.
  4. Set the Name of the new role to Backup OU-scoped.
  5. Leave the Create from template checkbox unticked.
  6. Add a Description of the Backup OU-scoped role, if required.
  7. Assign the Scope of the new role to:
    • Specific OU - only gives permissions to a selected OU.
    • Parent OU - only gives permissions to the OU of the assigned user.
    • OU and Child OUs - gives permissions to a selected OU and all child OUs of it.
    • Own Profile - coming soon.
  8. Select Create New Role.
  9. The Backup OU-scoped  role will now appear in the list of roles.
  10. Select the role from the list.
  11. On the Permissions tab, use the Add → button to move the following from the Unused Permissions column (on the left) into the Assigned Permissions column (on the right):
    • Backup Restoration & View Status for OU
  12. The user will also need to be assigned a role that assigns permissions for managing Organizational Units and Smart Teams. These include (but are not limited to):
    • Manage OUs
    • Manage Smart Teams
    • Manage Smart Teams Priority
    • Manage Users
    • View OU Hierarchy
  13. Select Save to confirm the changes.

 

To assign the Backup admin role to a user:

  1. Select the role from the list.
  2. On the Assigned Users tab, click on the downwards facing arrow next to Assignment. This will prompt the Assignment section to be displayed.
  3. Click on the Assign To field and choose whether you are assigning the role to an Org Unit, User Profile, Group, Service Account, External Profile or External Group.
  4. Click on the Name field to choose the name of the Holder that you want to apply the role to.
  5. Click on Add.
  6. The Holder will appear in the Role Assignments list. This list shows all the holders that are assigned to the selected role.
  7. Once the role is assigned to a user, they will see the Backup option displayed in the Functions bar (which is persistently displayed on the left side of the screen).

 

To assign the Backup OU-scoped role to a user:

  1. Select the role from the list.
  2. On the Assigned Users tab, click on the downwards facing arrow next to Assignment. This will prompt the Assignment section to be displayed.
  3. Click on the Assign To field and choose whether you are assigning the role to an Org Unit, User Profile, Group, Service Account, External Profile or External Group.
  4. Click on the Name field to choose the name of the Holder that you want to apply the role to.
  5. Click on the Org Unit field to choose what org unit to give access to depending on the scope of the role:
  • Parent OU - The Org Unit you have given access to will automatically be set to the parent OU of the assigned user. You do not need to choose an Org Unit explicitly. If you do so it will be ignored.
  • Specific OU -  Choose an Org Unit you would like to give access to.
  • OU and child OUs - Choose an Org Unit you would like to give access to. The user will also get access to all the children Org Units of the selected Org Unit.
  1. Click on Add.
  2. The Holder will appear in the Role Assignments list. This list shows all the holders that are assigned to the selected role.
  3. Once the role is assigned to a user, they will see the Backup option displayed in the Functions bar (which is persistently displayed on the left side of the screen).
Was this article helpful?
1 out of 1 found this helpful