Types of administrators

This section provides information about the types of administrators. For more information about administrators, see Key concepts and terms.

Administrator type	Description
Cloud Administrator for Enterprise workloads	Cloud Administrator for Enterprise workloads have the privileges to configure and monitor the Druva setup and create another cloud, organization, and group administrators. Only a Cloud Administrator for Enterprise workloads can manage another Cloud Administrator for Enterprise workloads and also create organization administrators. A Cloud Administrator for Hybrid workloads gets all the privileges of an organization administrator. To access the Druva Dashboard as a cloud administrator: Click Enterprise Workloads on the menu bar, or Click All Organizations on the menu bar. In addition, a Cloud Administrator for Enterprise workloads gets all the privileges of an organization administrator.
Organization administrator	Organization administrators can manage one or more organizations assigned to them by the cloud administrator and can create and manage group administrators for organizations assigned to them. 📝 Notes Only a cloud administrator can create organization administrators. Organizationadministrators cannot access the consolidated pages of all organizations. If you are an organization administrator in Native Workloads, you can manage all the accounts within an organization, as well as add additional organization and group administrators. To access the Organization Dashboard as an organization administrator: Click the Global Navigation icon. If you have multiple organizations registered to your name, the first organization is displayed. Or On the menu bar, select the required organization from the All Organization drop-down. In addition, organization administrators get all the privileges available to group administrators.
Group administrator	Group administrators have restricted access to the administrative groups with which they are associated. They have necessary permissions for administrative group-related activities such as managing servers belonging to their administrative groups. The cloud administrator and the organization administrator can change the administrative groups associated with group administrators. One group administrator can be assigned to manage multiple administrative groups. Similarly, a single administrative group can be managed by more than one group administrator. 📝 Notes Group administrators will receive alert notification for only the associated administrative groups. If you are an account administrator in Native Workloads, you will now be a group administrator with access to a specific account or a group of accounts. Group administrators can modify accounts that they are the administrators for but cannot add new users on Native Workloads.
Data protection officer	A data protection officer (DPO) has the privilege to configure audit trails, alerts, and reports. Reporting And Alert Management: Privilege to configure audit trail and reports. Backup And Restore Management: Privilege to enable and disable backup, trigger backup, restore data to the original or alternate location, and delete the cold recovery points. DR Management: Privilege to launch failover and disaster recovery restore.
View-only administrator	The view-only administrators have read-only access to all configurations. However, they cannot perform any administration action on any entities on the Druva Cloud Platform Console. Druva provides the following view-only administrator roles. Cloud administrator (View-only): Privilege to view, download, and email all reports and audit trails for all the organizations. The administrators can also view the activities of all the organizations. However, they cannot perform any action on the entities of the Hybrid Workloads Management Console. Organization administrator (View-only): Privilege to view, download, and email all reports for the organization(s) they have access to. The administrators can also view the activities of the organizations. However, they cannot perform any action on the entities belonging to their organizations. Group administrator (View-only): Privilege to view the activities of the administrative groups they are associated with. However, they cannot manage any administrative group. They can also subscribe to alerts and reports.

Create and manage the administrator account

This section provides information about how to create various administrators and manage the administrators. For more information about the administrators, see Key concepts and terms.

❗ Important

It is recommended to have a secondary administrator within your organization at any given time to avoid service disruptions if one of the administrators cannot log in or is no longer with the company.
After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud Administrator for Enterprise workloadss can reset the password of other administrators in your organization.

Create a Cloud Administrator for Enterprise Workloads

If Hybrid Workloads Management Console access is enabled, see Manage Druva administrators.

Cloud Administrator for Enterprise Workloads can perform activities such as configuring, managing, and monitoring Druva. Cloud administrators can also create other cloud, organization, and group administrators.

Procedure

Log in to the Druva Cloud Platform Console.
Click the Global Navigation icon >Scroll to the Administration section> ManageAdministrators.
On the Administrators page, click New Administrator.
On the New Administrator page, provide DisplayName, Email Address, Country, Time Zone, and select the Role as Druva Cloud Administrator.
Click Save.

When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:

"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."

Create product administrators for Enterprise Workloads

❗ Important

If Management Console access is enabled, see Manage Druva administrators.

Perform the following steps to create different types of administrators in Hybrid Workloads. For more information about each role, see Manage administrator accounts.

Procedure

Log in to the Druva Cloud Platform Console.
Click the Global Navigation icon >Scroll to the Administration section> ManageAdministrators.
On the Administrators page, click New Administrator.
On the CreateNew Administrator page, provide Display Name, Email Address, Country, Time Zone.
Select Administrator Role as Product Administrator and then select the product Enterprise Workloads(Hybrid_AWS).
From the Roles dropdown, select the type of admin you want to create. For example, to create a cloud administrator, select Cloud Administrato r, to create an organization administrator, select Organization Administrator, and so on. For more information about different types of administrators, see Manage administrator accounts.

📝 Notes

The Organization Administrator option will not be visible in the Roledrop-down if organization is disabled.
The Organization Administrator (View-only)role will be visible in the drop-down only if organization is enabled.
Click Save.

When any non-administrator with an existing subscription to alerts or reports is added as a cloud administrator, the following message is displayed:

"This email ID is already subscribed for alert(s)/report(s) as a non-administrator. Adding user as an Administrator will remove any existing non-administrator subscriptions."

Set a password policy

Only a Druva Cloud Administrator can set a password policy for all the Enterprise Workloads administrator accounts.

At the time of setting the password policy, you can choose to:

Enforce a strong password.
Set the number of previous passwords with which your new password must not match.
Set the number of invalid login attempts allowed.
Set the number of days after which the administrator password expires.

For more information, see Enable Password Policy for Administrators.

Update the administrator details

❗ Important

If Management Console access is enabled, see Manage Druva administrators.

If you are a cloud administrator, you can update administrator details.

Procedure

Log in to the Management Console.
Click the Global Navigation icon >Scroll down to the Administration section> ManageAdministrators.
On the Administrators page, click on the administrator for whom you want to update details.
Click Edit.
Provide the following details.
- Name:The display name of the administrator.
- Country:The country where the administrator is located.
- Time Zone:The time zone of the country of location.

📝 Note

The time zone determines the following:

The timestamps on the reports that the administrator receives.
The timestamps on the jobs that the administrator views.

Click Save.

Delete an administrator account

❗ Important

If Management Console access is enabled, see Manage Druva administrators.

If you are a cloud administrator, you can delete other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can delete group administrators.

📝 Note

Druva does not send notifications for delete operations. You might want to consider informing the administrator whose account you deleted.

Procedure

Log in to the Management Console.
Click the Global Navigation icon > Scroll down to the Administration section> ManageAdministrators.
Click the administrator that you want to delete, and then click Delete.

Reset an administrator password

If Management Console access is enabled, see Manage Druva administrators. After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud Administrator for Enterprise workloadss can reset the password of other administrators in your organization.

📝 Note

If SSO is enabled, the Reset Password button and the Change Password buttons are visible only to the Druva Cloud Administrators. You cannot reset the password of other admins as only Druva Cloud Administrators are allowed a Failsafe login. Other administrators must use the SSO password to log in.

If you are a cloud administrator, you can reset passwords for other cloud administrators, organization administrators, and group administrators. If you are an organization administrator, you can reset passwords for group administrators. After you reset an administrator's password, Druva sends an e-mail with the new password to that administrator.

Procedure

Log in to the Management Console.
Click the Global Navigation icon > Scroll down to the Administration section> ManageAdministrators.
Click Reset Password.
Click Reset Password on the confirmation message.

Administrator responsibilities

The following table lists the responsibilities of the administrators. The organization administrators can manage entities belonging only to the organizations assigned by the cloud administrators. The group administrators can manage administrative group-related activities.

The administratorresponsibilities tableuses the following abbreviations:

DCA: Druva Cloud Administrator
CA: Cloud Administrator for Enterprise workloads
OA: Organization Administrator
GA: Group Administrator
CA (view): Cloud Administrator with view-only rights
OA (view): Organization Administrator with view-only rights
GA (view): Group Administrator with view-only rights
DPO: Data Protection Officer

Responsibility	DCA	CA	OA	GA	CA (view)	OA (view)	GA (view)	DPO

Monitor Druva on the Dashboard page	✅	✅	✅	✅	✅	✅	✅	✅
Manage reports	✅	✅	✅	✅	✅	✅	✅	✅
View audit trail	✅	✅	❌	❌	✅	❌	❌	✅
Manage audit trail	✅	✅	❌	❌	❌	❌	❌	❌

View backup policies	✅	✅	✅	✅	✅	✅	✅	✅
Create a backup policy	✅	✅	✅	✅	❌	❌	❌	❌
Modify existing backup policies	✅	✅	✅	✅	❌	❌	❌	❌
Delete backup policies	✅	✅	✅	✅	❌	❌	❌	❌

View content rule	✅	✅	✅	✅	✅	✅	✅	✅
Create content rule	✅	✅	✅	✅	❌	❌	❌	❌
Modify content rule	✅	✅	✅	✅	❌	❌	❌	❌
Delete content rule	✅	✅	✅	✅	❌	❌	❌	❌

Create an administrative group	✅	✅	✅	❌	❌	❌	❌	❌

Register a server	✅	✅	✅	✅	❌	❌	❌	❌
Configure a server	✅	✅	✅	✅	❌	❌	❌	❌
Reconfigure a server	✅	✅	✅	✅	❌	❌	❌	❌
Enable and disable a backup set	✅	✅	✅	✅	❌	❌	❌	✅
Disable Phoenix Backup Store	✅	✅	✅	✅	❌	❌	❌	❌
Back up and restore a server	✅	✅	✅	✅	❌	❌	❌	✅
Delete a recovery point	✅	✅	✅	✅	❌	❌	❌	✅
Update a backup set	✅	✅	✅	✅	❌	❌	❌	❌
Delete a backup set	✅	✅	✅	✅	❌	❌	❌	❌

Create an administrator	✅	✅	✅	❌	❌	❌	❌	❌
Update administrator details	✅	✅	✅	❌	❌	❌	❌	❌
Add or remove administrative groups associated with a group administrator	✅	✅	✅	❌	❌	❌	❌	❌
Add or remove organizations associated with organization administrators	✅	✅	❌	❌	❌	❌	❌	❌
Reset administrator password	✅	✅	✅	❌	❌	❌	❌	❌
Delete administrators	✅	✅	✅	❌	❌	❌	❌	❌
Set password policy	✅	❌	❌	❌	❌	❌	❌	❌
Set up SSO	✅	❌	❌	❌	❌	❌	❌	❌

Add, install, and activate CloudCache	✅	✅	✅	✅	❌	❌	❌	❌
Configure CloudCache	✅	✅	✅	✅	❌	❌	❌	❌
Update CloudCache details	✅	✅	✅	✅	❌	❌	❌	❌
Decommission CloudCache	✅	✅	✅	❌	❌	❌	❌	❌
Delete CloudCache	✅	✅	✅	❌	❌	❌	❌	❌
Add and update CloudCache Data Volumes	✅	✅	✅	✅	❌	❌	❌	❌

Creating organizations	✅	✅	❌	❌	❌	❌	❌	❌
Access to all organizations	✅	✅	❌	❌	✅	❌	❌	✅
View storage usage	✅	✅	❌	❌	✅	❌	❌	✅
Disaster recovery
View a DR plan	✅	✅	✅	✅	✅	✅	✅	✅
Create a DR plan	✅	✅	✅	❌	❌	❌	❌	✅
Edit a DR plan	✅	✅	✅	❌	❌	❌	❌	✅
Delete a DR plan	✅	✅	✅	❌	❌	❌	❌	✅
Restore virtual machines for DR	✅	✅	✅	❌	❌	❌	❌	✅
Trigger failover	✅	✅	✅	❌	❌	❌	❌	✅
Trigger failback	✅	✅	✅	❌	❌	❌	❌	✅
Delete Druva AWS proxy	✅	✅	✅	❌	❌	❌	❌	❌
Delete AWS account	✅	✅	✅	❌	❌	❌	❌	❌

Manage your Druva account

This section contains instructions for updating your account details and your password.

Update your account details

This topic provides instructions for updating your account details.

Procedure

Log in to the Management Console.
At the top-right corner of the menu bar, click New human fig > click your username.
Click Edit.
On the Edit Administrator Details screen, provide the following details.
- Display Name:Type a display name that you want to use.
- Country:Click the appropriate country.
- Time Zone:Click the time zone that you want to use for timestamps.
📝 Note

The time zone determines the following:
- The timestamps on the reports that administrator receives.
- The timestamps on the tasks that administrator views.
Click Save.

Update your password

You must update your password, if:

Your password was reset.
The password policy for your Druva setup requires you to update your password periodically.

Best practices for password updates

We recommend that you follow the following best practices while updating your password:

The password should be alphanumeric.
The password should not be a dictionary word.
The password should not contain strings of consecutive numbers or alphabets.

Procedure

Log in to the Management Console.
At the top-right corner of the menu bar, click New human fig > click your username.
Click Change Password.
Set a new password, and click Save.

Manage Druva Administrators

About Reports

Manage administrative groups