Safeguarded snapshots

Safeguarded snapshots are snapshots with an expiration time and restrictions regarding their premature deletion, that is the deletion of a snapshot before its expiration time. Only a Security administrator can delete a safeguarded snapshot prematurely.

Like standard snapshots, safeguarded snapshots can be created with either an internal scheduler or an external scheduler.

To safeguard snapshots using the internal scheduler, you can assign a snapshot policy and specify that the snapshot schedule should be safeguarded. This schedule then adds safeguarded snapshots to the volume group.

Note: You cannot configure safeguarded snapshots with the external scheduler if the volume group has a safeguarded backup policy assigned to it.

Safeguarded snapshot user roles

The following section explains all the responsibilities and roles that are given to the safeguarded copy function users.

System administrator

The system administrator can do the following actions on the safeguarded copy objects:

Create a safeguarded volume group.
Assign volumes to the safeguarded volume group.
Delete a safeguarded source volume.
Delete a safeguarded volume group.
Associate a safeguarded snapshot policy to a volume group.

The system administrator cannot do the following actions on the safeguarded copy function objects:

Delete safeguarded snapshot.
Remove safeguarded snapshot policy association from a volume group.

Security administrator

In addition to the system administrator, the security administrator can do the following actions on the safeguarded snapshots:

Delete safeguarded snapshots.
Remove safeguarded snapshot policy association from a volume group.