To add a new user, go to the Users tab in the User Administration module and press the Add User button.
The Create user dialog window will display.
1.Provide a unique login.
2.Set Enabled if this user can work with CDSB immediately after creation. Otherwise, you can create all users first and then enable them.
3.Set the user name and E-mail.
4.Set the time zone. All dates and times in backup jobs, schedules and other objects will be shown in local time according to the selected time zone.
5.Select the user role. The following roles are available:
•“Administrator” – global administrator role that has access to all objects and operations.
•“Tenant Administrator” – has full access to tenant’s objects and can manage users and AWS accounts.
•“Full Access” – has full access to tenant’s objects except user management operations.
•“Backup” – has access to backup only, but not to restore operations.
•“Read Only” – no access to active operations and can just view information.
6.Select tenant.
7.Provide a description if necessary.
The table below describes what kind of users can read/create/edit/delete objects like tenants, AWS accounts and users.
|
Tenants |
AWS accounts |
Users |
|---|---|---|---|
Read |
•Only global administrator can view tenants in the User administration module. •In other modules, global administrators can view data from public tenants. Others can see data from their tenants only. |
•Only global or tenant administrator can view AWS accounts in the User Administration module. •Tenant administrator can see AWS accounts from the current tenant. Global administrator can also see AWS accounts from public tenants (not from isolated tenants). |
•Global or tenant administrator. •Tenant administrator can only see users from his tenant. Global administrator can see users from all tenants (even isolated ones). |
Create |
•Only global administrator. |
•Global or tenant administrator. •Tenant administrator can only create AWS accounts in his current tenant. Global administrator can also create AWS accounts in public tenants. |
•Global or tenant administrator. •Tenant administrator can only add user to his tenant. Global administrator can add users to all tenants. •Tenant administrator cannot set “Administrator” role. •Users with “Administrator” role must be in Administrator tenant. |
Edit |
•Only global administrator. •Administrator tenant cannot be edited. |
•Global or tenant administrator. •Tenant administrator can only edit AWS accounts in his current tenant. Global administrator can edit AWS accounts in public tenants. •Global administrator cannot place AWS account into another tenant if the AWS account is used in any jobs. |
•Global or tenant administrator. •Tenant administrator can only edit users of his tenant. Global administrator can edit users of all tenants. •Tenant administrator cannot change user’s tenant. •Tenant administrator cannot set “Administrator” role for a user. •Users with “Administrator’ role must be in Administrator tenant. •Cannot remove Global/tenant administrator role for your own user. •Cannot change a user’s tenant if the user has any backup jobs. |
Delete |
•Global administrator. •Administrator tenant cannot be deleted. •Cannot delete tenant if there are jobs in it. |
•Global or tenant administrator. •Tenant administrator can delete only AWS accounts from his tenant. Global administrator can delete AWS accounts from public tenants. •If AWS account is used in jobs, it cannot be deleted. •Default AWS account cannot be deleted. |
•Global or tenant administrator. •Tenant administrator can delete users only from his tenant. Global administrator can delete users from all tenants. •If a user has jobs, it cannot be deleted. •You cannot delete your own user. |