Understanding Computer Assignments and User Management Capabilities
LiveVault Online Backup Service enables you to easily delegate operations among your users while
controlling administrative responsibility and maintaining the security of your
environment and data.
This is easily implemented in MyLiveVault through the combination of:
In many companies, particularly those with only one or a few users and small
number of computers, it is appropriate to assign all
computers and all management capabilities to all users. This allows all the MyLiveVault
users to view and access all computers from the All Computers form and to perform all
management operations for the computers.
Note: This was the default for all versions
of LiveVault Online Backup Service prior to version 3.3.
However, some companies with many users and computers may prefer to limit the
computers the various users can view and access, and to limit the management
operations each user can perform. For example, your company's administrator may choose to assign the
responsibility for monitoring and managing computers at various offices to the users
at those offices. The administrator can limit the computers available to users to
those computers at the associated office. In addition, the administrator can delegate to certain users the
capability to manage backup and to restore data for those
computers.
It is important to understand that the assigned management capabilities are associated with the user; they are not specific to a
computer. For example, if a user is assigned the capability to manage backup, then the user can manage backup for
all
computers that are assigned to that user.
Assigning computers to users
Every user who is allowed to log in to MyLiveVault must be assigned either
all computers for the company account or a subset of the company's computers.
Assigning computers involves:
Setting a property on each user's Properties tab on
the User Information form specifying whether the user can
manage all computers or a subset of the company's computers. If a subset is appropriate, then assigning the individual computers to the
user.
Because this property determines which computers a user can access and
manage, it is important to set this property appropriately for each user based
on your company's environment. For example:
For each user who is responsible for performing monitoring or management
operations on all of the company account's computers, select the User can
manage all computers option to assign all computers to the user. The
user can access and manage all computers. When a new computer is
added, it is automatically assigned to the user and cannot be
removed from that user. However, if you wish to delegate responsibility for monitoring or managing
specific computers to different users, then select the User can manage
only these computers option for that user. Then from the list of
available computer's, select the computers to assign to this user. This user's access is restricted to only those assigned
computers. When a new computer is added, it must be assigned to a restricted
user if that user is supposed to access and manage it.
On the All Computers form and on the user's Properties tab on
the User Information form, a MyLiveVault user will see the computers
that the user can access and manage. For example, if you are assigned all computers for your company account, then all
computers are shown. If you are assigned a subset of the computers for your
company account, then that subset of computers is shown. If you have not been
assigned any computers, the following message is displayed on the All
Computers form:
There are no computers assigned to you to manage. Please contact another
administrator to have computers assigned to you.
Computers can be assigned through MyLiveVault in various ways. Choose the
method that is appropriate for your task. You can assign computers to users
when:
Adding a new computer or by editing the computer's properties at any time.
This allows you to quickly add or remove multiple users for the specific
computer.
During these procedures, a list of all users is displayed and you can select
which users are allowed to access and manage the computer. These users can view
this computer on the All Computers form and perform operations (such as
backup or restore, as allowed by that user's assigned capabilities) for this
computer. Adding a new user or by editing the user's properties at any time. This
allows you to quickly add or remove multiple computers for the specific user.
During these procedures, a list of available computers is displayed and you
can select which computers the user will be allowed to access and manage. The
user can view these computers on the All Computers form and perform
operations (such as backup or restore, as allowed by that user's assigned
capabilities) for these computers.
The computer list shows only those computers that have been assigned to
you (the logged in user). You can assign all or a
subset of those computers to the user whose properties you are configuring. You cannot assign other
computers to the user. However, if someone else has assigned additional
computers to this user (which have not also been assigned to you), then the
text and others is displayed in the list.
Assigning management capabilities to users
Every user who is allowed to log in to MyLiveVault must be assigned management
capabilities before they can perform any operations. These capabilities determine the operations that user can perform in MyLiveVault. New users automatically have no assigned management capabilities.
Instead, each capability must be manually
assigned to the user before that user can perform the associated operations.
The following management capabilities are available. All or a subset of these
capabilities may be assigned to a user.
| This capability... |
Allows the user to... |
| User can add, edit, and remove other users |
Manage
users for the company account. The user can:
Add new users. Edit all users' contact information. Edit all users' properties including assigning computers and
assigning user capabilities. Disable users' accounts, so a user cannot log in to MyLiveVault. Enable users' accounts, so a user can again log in to MyLiveVault. Reset users' passwords. Specify users as technical or billing/administrative contacts. Delete users from this company account.
A user who does not have this capability can view all
existing users' account information, but can only edit their own contact
information. |
| User can add, edit, and remove computers |
Manage
computers for the company account. The user can:
Add new computers. Download the Agent software to computers. Modify computers' properties, including a computer's name and backup
bandwidth limit. It includes specifying technical contacts or assigning
computers to users only if the user also has been assigned the
capability to manage users (User can add, edit, and remove other users). Remove computers from the company account.
A user who does not have this capability can only view existing computers'
properties. |
| User can add, edit, suspend, and remove backup
configurations |
Manage
backup for computers on the company account. The user can:
View backup status and details for backup configurations. Configure new backup configurations. Modify existing backup configurations. Suspend and resume backup for computers. Remove backup configurations.
A user who does not have this capability can only view backup status and
details for backup configurations. |
| User can perform network restores and shipped media restores |
Restore data over the Internet for computers on the company account,
and optionally request restores on media.
A user who does not have this capability can only view existing restore requests' status and details. Note:
A user cannot have the capability to request media restores only.
|
| User can edit company account information and global
password settings |
Edit
company information and set password policy for the company account. The user
can:
Edit the company account information, including company name. It
includes specifying billing/administrative contacts only if the user
also has been assigned the capability to manage users (User can add, edit, and remove other
users). Set and modify the global password policy for the company account.
A user who does not have this capability can view the current
company information and password policy. |
All users can view the capability settings for all other users. However,
only a user with the capability User can add, edit, and remove other users
can assign capabilities to other users. Also, you can only assign to
other users the set (or a subset) of capabilities that you have. For example,
if you have the capability User can add, edit, and remove computers
then you can assign that to another user. If you do not have the capability
User can add, edit, and remove computers then you cannot assign that
to another user.
Related Information
Managing User Accounts: An Overview
Managing Your Computers: An Overview
|
