User Administration and Security - Managing User Groups

Table of Contents

User Groups are named logical entities to which capabilities, CommCell objects and users are assigned. Users assigned to a group are granted the group's privileges as well as access to the group's object associations.

The following user groups are automatically created along with the software installation:

User Group Description
Master By default, the Master user group is automatically created during the installation of the software. This user group is assigned all available capabilities as system resources. The user you created during the installation of the software is automatically assigned to this user group. Users who are members of this user group have all available rights within the CommCell.
View All This user group allows a user to see all CommCell entities and associated schedules, regardless of the associations of the user groups to which that user has an association. However, users cannot modify the schedules unless they created them. For more information, see Assigning Users to the View All User Group.

Creating a New User Group

User groups must be created for users who require access to the system. Each user group represents a distinct set of users, capabilities, and CommCell objects. You can create any number of user groups, each having any combination of assigned capabilities.

Use the following steps to create a new user group:

  1. From the CommCell Browser, go to Security.
  2. Right-click CommCell User Groups and click New User Group.

    The New User Group Properties dialog box appears.

  3. In the General tab, do the following:
    1. In the Name box, type the user group name.
    2. In the Description box, type a description.

    Do not select the All Capabilities and All Associations check boxes if you do not want to expose all CommCell features and resources to users who may not have adequate training or knowledge. For this reason, these options are cleared by default.

  4. Click the Capabilities tab and assign specific capabilities to the user group.
  5. Click the Users tab and assign users to the user group.
  6. Click the Associated Entities tab to associate the user group with specific CommCell objects, for example, client groups, client computers, and schedule policies.

    To associate the user group with all CommCell resources, click the General tab and select the All Associations check box.

  7. Click OK.

Assigning Capabilities to a User Group

When assigning capabilities to a user group, the capabilities assigned should match the functions the users of that user group will be performing within the CommCell. For a complete list of capabilities, see Capabilities and Permitted Actions.

Use the following steps to assign capabilities to a user group:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Properties.

    The User Group Properties dialog box appears.

  3. Click the Capabilities tab.
  4. Assign capabilities to the user group by moving capabilities from the Available Capabilities list to the Assigned Capabilities list.
  5. To assign all capabilities, click the General tab and select the All Capabilities check box.
  6. Click OK.

Assigning View Capability to the User Group

You can create a user group with the View capability, which can be associated with specific entities within the CommCell. Members of this user group will only be able to view those entities associated with the user group.

Use the following steps to assign View capability to a user group:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Properties.

    The User Group Properties dialog box appears.

  3. Click the Capabilities tab.
  4. Assign the View capability to the user group by moving it from the Available Capabilities list to the Assigned Capabilities list.
  5. Click OK.

Assigning Users to a User Group

A user can obtain the functionality of a user group by being assigned to that group. You can assign one or more users to a user group. A user can be a member of more than one group and have all of the capabilities from each of those groups.

If you have an Active Directory (AD) domain configured in your CommCell, you can also associate the participating AD users to a user group.

Use the following steps to assign a user to a user group:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Properties.

    The User Group Properties dialog box appears.

  3. Click the Users tab.
  4. Assign users to the user group by moving users from the Available Users list to the Member Users list.
  5. Click OK.

Assigning Users to the View All User Group

Members of the View All user group can see all entities in the CommCell Console as well as associated job schedules, regardless of the associations of their member user groups. By default, the Automatically Add New Users to the "View All" Group option on the Security tab at the CommCell level is enabled, allowing all newly created users membership with this group. Users can also be added to this group individually.

Though users within this group can view all schedules associated with all CommCell entities, they can only modify those schedules which they have created.

If a user is not part of the View All user group, then that user will not see CommCell objects for which the user's member user group(s) does not have associations. Furthermore, users will not be able to view the Job Controller or Event Viewer details associated with the CommCell objects for which they do not have permissions. Note that a user will not be able to view these CommCell objects upon logging onto the CommCell Console after the restrictions have been set.

Use the following steps to enable a user to view all objects in the CommCell Console:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the View All user group and click Properties.

    The User Group Properties dialog box appears.

  3. Click the Users tab.
  4. Select the users to be assigned to the View All user group by moving them from the Available Users list to the Member Users list.
  5. Click OK.

Associating CommCell Objects to a User Group

CommCell object associations enable members of a group to perform operations on a specific object. The nature of those operations depends on the capabilities assigned to the group.

If an object, such as a client computer or higher level object, is not associated with a given user group, then the users of that group cannot perform any operations involving that client computer. The following objects can be associated with a user group:

  • CommServe
  • Client Computer Group
  • Client Computer
  • Agent
  • Backup set
  • Subclient
  • MediaAgent
  • Library
  • Schedule Policy
  • Storage Array
  • Storage policy
  • Vault Tracker Policy

Each of these objects supports specific functions within the CommCell. For a summary of these functions, see Capabilities and Permitted Actions.

Use the following steps to associate CommCell objects to a user group:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Properties.

    The User Group Properties dialog box appears.

  3. Click the Associated Entities tab and select the entities to associate with the user group.

    To associate all CommCell entities with the user group, click the General tab and select the All Associations check box.

  4. Click OK.

Deleting a User Group

The master user group is the primary CommCell administrator group and remains available at all times. This group cannot be deleted.

Use the following steps to delete an existing user group:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Delete.
  3. Click Yes to confirm the deletion.

Enabling or Disabling a User Group

If you disable an existing user group account, this user group will immediately not be able to create or receive scheduled reports or alerts.

Use the following steps to disable or enable a user group. By default, a user group will be enabled when created:

  1. From the CommCell Browser, go to Security > CommCell User Groups.
  2. Right-click the user_group and click Properties.

    The User Group Properties dialog box appears.

  3. In the General tab, do one of the following:
    • Clear the Enabled check box to disable the user group.
    • Select the Enabled check box to enable the user group.
  4. Click OK.