Restricting user access to the server

Authority levels determine what an administrator can do with the IBM Storage Protect server. An administrator with system authority can complete any task with the server. Administrators with policy, storage, or operator authority can complete subsets of tasks.

1. After you register an administrator by using the REGISTER ADMIN command, use the GRANT AUTHORITY command to set the administrator's authority level.
   For details about setting and changing authority, see Managing administrators.
2. To control the authority of an administrator to complete some tasks, use the following two server options:
   1. You can select the authority level that an administrator must have to issue QUERY and SELECT commands with the QUERYAUTH server option. By default, no authority level is required. You can change the requirement to one of the authority levels, including system.
   2. You can specify that system authority is required for commands that cause the server to write to an external file with the REQSYSAUTHOUTFILE server option. By default, system authority is required for such commands.
3. You can restrict data backup on a client node to only root user IDs or authorized users.
   For example, to limit backups to the root user ID, issue the REGISTER NODE or UPDATE NODE command and specify the BACKUPINITIATION=root parameter:

   update node backupinitiation=root