Data Protection for VMware vSphere GUI user roles

The availability of Data Protection for VMware vSphere GUI functions is based on the authority level that is assigned to your IBM Spectrum Protect™ administrator ID.

The administrator ID must match the node name. In earlier product releases, the REGISTER NODE command automatically created an administrative user ID whose name matched the node name. Beginning with IBM Spectrum Protect V8.1, the REGISTER NODE command does not automatically create an administrative user ID that matches the node name.

When registering a new node, the IBM Spectrum Protect server administrator must specify the userid parameter with the REGISTER NODE server command: 
REGISTER NODE node_name password userid=user_id
Where the node name and the administrative user ID must be the same. For example: 
REGISTER NODE node_a mypassw0rd userid=node_a

By default, the node has client owner authority.

The tasks that you can run with the Data Protection for VMware vSphere GUI are based on the privilege class that is assigned to the administrator ID.

When the administrator ID does not have unrestricted policy domain privileges, you cannot register new nodes or set their proxy relationship on the IBM Spectrum Protect server. If you do not enter an administrator ID, a macro script is created so you can run on the IBM Spectrum Protect server.

An IBM Spectrum Protect administrator ID is requested when configuring the Data Protection for VMware vSphere GUI. This table lists the functions that are available based on the privilege class assigned to that ID:
  • A Yes value indicates available function for the user role.
  • A No value indicates function that is not available for the user role.
To view your current Data Protection for VMware vSphere GUI role, hover the cursor over your user ID in the navigation bar.
Table 1. Available functions based on IBM Spectrum Protect Administrator ID privilege requirements
 

Operator

Operator with Reporting

Restricted Administrator

Administrator
Summary Run now backup and restore Operator plus reporting Operator plus reporting and schedule operations for listed policy domains All roles, including initial configuration
IBM Spectrum Protect Admin ID Privilege Class None One of the following privilege classes:
  • Storage
  • Operator
  • Analyst
 Policy (Restricted) or one of the following privilege classes:
  • Storage
  • Operator
  • Analyst
 Policy (Unrestricted) or System
 
Backup tab
Manage Run now backup tasks Yes Yes Yes Yes
Manage Scheduled backup tasks No1 No1 Yes, within policy domains Yes
View Run now backup tasks Yes Yes Yes Yes
View Scheduled backup tasks No Yes Yes Yes
Delete a Scheduled backup task No No Yes within policy domains Yes
 
Restore tab
Run a Restore task Yes Yes Yes Yes
 
Reports tab
Events No Yes Yes Yes
Recent Tasks Yes Yes Yes Yes
Backup Status No Yes Yes Yes
Application Protection No Yes Yes Yes
Datacenter Occupancy No Yes Yes Yes
 
Configuration tab
Node Registration
(Configuration Status -> Run Configuration Wizard)		 No No No2 Yes
Change IBM Spectrum Protect Admin ID Credentials
(Configuration Status -> Edit Configuration)		 Yes Yes Yes Yes
Change VMCLI Node Password
(Configuration Status -> Edit Configuration)		 No No Yes Yes
Change GUI Domains
(Configuration Status -> Edit Configuration)		 Yes3 Yes3 Yes3 Yes
Change Data Mover Nodes
(Configuration Status -> Edit Configuration)		 No No No2 Yes
Change Mount Proxy Nodes
(Configuration Status -> Edit Configuration)		 No No No2 Yes
  1. You cannot register the node because an unrestricted domain policy is required.
  2. You can add or remove VMware datacenters and register datacenter nodes.
To view the IBM Spectrum Protect administrator ID authority level and corresponding Data Protection for VMware vSphere GUI role:
  1. Go to the Configuration window.
  2. Click Edit Configuration.
  3. The relevant information is shown on the Spectrum Protect Server Credentials page.
Important:
  • If the IBM Spectrum Protect administrator ID authority level changes on the IBM Spectrum Protect server, the Data Protection for VMware vSphere GUI must be restarted to reflect this change.
  • When changing the User Role, you must click OK to save your changes before going to another Configuration Settings page or attempting another configuration change. Otherwise your User Role changes do not take effect.