User roles and types
TIP:
To identify the current user, click the user icon (
).
User roles
When the system is installed, the Admin user is created and assigned the Administrator role.
The following roles define the permissions associated with a user:
•
Administrator
: This role allows a user to create and edit management and StoreOnce functions in the
StoreOnce Management Console. Any user with the Administrator role has the same permissions as
the default Admin account.
•
Observer
: This role limits access to monitoring and viewing.
•
Security Officer
: This role limits the user to creating, editing, and managing security features. For
example, key managers, SSL certificates, and directory management.
•
Backup Admin
: This role limits the user to creating, editing, and managing data services features.
•
Backup Operator
: This role limits the user to monitoring and viewing the data services features.
User types
After installation, an administrator can configure additional user accounts and assign them permissions
roles and passwords.
The following types of user accounts are available:
• Local User (with an Administrator or Observer role): Logs in locally and is authenticated using
credentials on the StoreOnce System.
• Directory User (with any user role): Logs in as a domain user. External users are authenticated using
their domain credentials by either an external Microsoft Active Directory Server.
• Directory Group (with any user role): A Microsoft Active Directory group. Members of the group login
as domain users.
TIP:
To add directory users or groups, first add the HPE StoreOnce device to an Active Directory
domain. Then configure the connection to the Active Directory Domain. For instructions, see the
user guide.
Default account
• When a StoreOnce System is installed, one default user account (Admin) is created with the
Administrator role. You cannot delete the account.
When you first access a StoreOnce System, use the StoreOnce First Time Setup wizard to set the
password for the Admin account.
IMPORTANT:
HPE strongly recommends that you change the default password. After the Admin
account password has been change, it cannot be changed back to the default password.
• If Admin credentials are lost, the Admin password can be reset through a locally attached Initialization
Console. HPE recommends changing the Initialization Console password after installation and storing
126
Configuring a newly installed system
