About user permissions in the web console
Veritas Resiliency Platform uses the concepts of personas, job, and objects to define permissions for users in the web console.
Persona | A role that has access to a predefined set of jobs (operations). The product comes with a set of predefined personas. See Predefined personas. You can also add custom personas. See Predefined jobs that can be used for custom personas. All users and groups that are added to Resiliency Platform have the Guest persona by default. The Guest persona allows users to view everything in the web console but not to perform any operations. |
Job | A type of task (operation) that a user can perform. Examples: Manage resiliency groups Manage assets Perform disaster recovery of resiliency groups |
Object types and scope | Each job can be performed on certain types of Resiliency Platform objects. Types of objects include data centers, resiliency groups, and virtual business services. See About Resiliency Platform features and components. When you assign a persona to a user or group, you define the scope of some jobs by selecting from available objects. For some jobs, the scope is the resiliency domain, which would be the entire scope of the product deployment. |
If you want a user to have permissions that are different from the user group to which they belong, you must add the user individually to Resiliency Platform. Permissions assigned at the individual user level override the permissions that the user has as a user group member.
If a user tries to perform an operation for which they do not have authorization, a message is displayed to notify them of the fact; in addition an entry for "authorization check failed" is available in the audit logs.
More Information