Role-Based Access Control (RBAC) for Cyber Resiliency

Druva provides a powerful security tool - Cyber Resiliency that helps companies spot ransomware attacks, find clean data backups, and safely restore their systems after a ransomware attack.

The core challenge is that Cyber Resiliency features are only accessible to administrators with the Druva Cloud Administrator role, but both backup admins and SecOps teams need access. This forces organizations to grant more administrators the high-privilege Cloud Admin role, increasing security risk — if any of those credentials are compromised, a threat actor could gain unrestricted access to backups and system configurations.

Introducing Druva Cloud Platform View-Only Administrator role that eliminates the need to grant all administrators the high-privilege Druva Cloud Administrator role.

Administrator with the Druva Cloud Platform View-Only Administrator role can access and view all licensed Cyber Resiliency features. They do not have create, update/edit, delete actions permissions for Cyber Resiliency features.

Specific UI elements (buttons, checkboxes) are hidden and corresponding APIs are blocked for the administrator with the Druva Cloud Platform View-Only Administrator role.

Here is a comprehensive overview of the tasks/ actions that an administrator with the Druva Cloud Platform View-Only Administrator role can perform for Cyber Resiliency features:

Feature: Quarantine Bay

Feature: Curated Snapshots

Feature: Restore Scan

Feature: Data Anomalies

Feature: Threat Hunting

Feature: Threat Watch

Feature: Cyber Recovery Runbooks

Feature: Audit Trails for Cyber Resiliency

Feature: Cyber Resiliency Alerts

Feature: IOC Library

Feature: Security Center

Feature: Access Events

Feature: Cyber Resiliency Reports