Commands requiring policy privilege

An administrator with policy privilege can issue commands that relate to policy management objects such as policy domains, policy sets, management classes, copy groups, and schedules. The policy privilege can be unrestricted, or can be restricted to specific policy domains.

With unrestricted policy privilege, you can issue all of the administrator commands that require policy privilege. You can issue commands that affect all existing policy domains as well as any policy domains that are defined in the future. An unrestricted policy administrator cannot define, delete, or copy policy domains.

With restricted policy privilege, you can issue administrator commands that affect one or more policy domains for which authority is granted. For example, the DELETE MGMTCLASS command requires you to have policy privilege for the policy domain to which the management class belongs.

Table 1 lists the commands that an administrator with policy privilege can issue.
Table 1. Policy privilege commands
Command name Command name
  • ACTIVATE POLICYSET
  • ASSIGN DEFMGMTCLASS
  • CLEAN DRIVE
  • BACKUP NODE
  • COPY MGMTCLASS
  • COPY POLICYSET
  • COPY SCHEDULE (Review note 2.)
  • DECOMMISSION NODE
  • DECOMMISSION VM
  • DEFINE ASSOCIATION
  • DEFINE BACKUPSET
  • DEFINE COPYGROUP
  • DEFINE CLIENTACTION
  • DEFINE CLIENTOPT
  • DEFINE HOLD
  • DEFINE MGMTCLASS
  • DEFINE NODEGROUP
  • DEFINE NODEGROUPMEMBER
  • DEFINE POLICYSET
  • DEFINE RETRULE
  • DEFINE SCHEDULE
  • DELETE ASSOCIATION
  • DELETE BACKUPSET
  • DELETE COPYGROUP
  • DELETE EVENT (Review note 1.)
  • DELETE FILESPACE
  • DELETE MGMTCLASS
  • DELETE NODEGROUP
  • DELETE NODEGROUPMEMBER
  • DELETE POLICYSET
  • DELETE PATH
  • DELETE SCHEDULE (Review note 2.)
  • GENERATE BACKUPSET
  • HOLD RETSET
  • LOCK NODE
  • QUERY BACKUPSETCONTENTS
  • REGISTER NODE
  • RELEASE RETSET
  • REMOVE NODE
  • RENAME HOLD
  • RENAME NODE
  • RENAME RETRULE
  • SET SUMMARYRETENTION
  • RESTORE NODE
  • QUERY TOC
  • UNLOCK NODE
  • UPDATE BACKUPSET
  • UPDATE COPYGROUP
  • UPDATE DOMAIN
  • UPDATE HOLD
  • UPDATE MGMTCLASS
  • UPDATE NODE
  • UPDATE NODEGROUP
  • UPDATE POLICYSET
  • UPDATE RETRULE
  • UPDATE RETSET
  • UPDATE SCHEDULE (Review note 2.)
  • VALIDATE POLICYSET
Notes:
  1. This command can be restricted by policy domain. An administrator with unrestricted policy privilege or restricted policy privilege for a specified policy domain can issue this command.
  2. This command is restricted by the authority that is granted to an administrator. System privilege is required only for administrative command schedules. System or policy privilege is required for client operation schedules.