Disaster Recovery roles
When you activate Disaster Recovery (DR), all administrators and read-only administrators at the management portal level are automatically granted access to the functionality of Disaster Recovery. During the account creation process, you can assign the relevant role to each user.
Disaster Recovery also includes a DR-specific role, DR support operator, which can be assigned to users at the Protection level as required.
The table below describes each of the roles, and the rights assigned to each role in the context of Disaster Recovery.
|
Context |
Functional area |
Feature |
Administrator |
Read-only administrator |
DR support operator |
|---|---|---|---|---|---|
|
Servers |
Common |
View all activities |
Yes |
Yes |
Yes |
|
View activities by status: any status / in progress / Succeeded / Failed |
Yes |
Yes |
Yes |
||
|
Disaster recovery location (applicable to DR for Azure)
|
Configure (from protection plan, from DR section) |
Yes |
Yes |
Yes |
|
|
Site location selection |
Yes |
Yes |
Yes |
||
|
Azure subscription - add new |
Yes |
No |
No |
||
|
Azure subscription - select existing |
Yes |
Yes |
Yes |
||
|
Select Azure region |
Yes |
No |
No |
||
|
Recovery network - switch to basic |
Yes |
Yes |
Yes |
||
|
Recovery network - switch to advanced |
Yes |
Yes |
Yes |
||
|
Recovery network - add |
Yes |
No |
No |
||
|
VNet, Subnet listing |
Yes |
No |
No |
||
|
Configure |
Yes |
No |
No |
||
|
Recovery servers |
View the list of recovery servers |
Yes |
Yes |
Yes |
|
|
Sort the list of recovery servers by Names/ Status/ State/ RPO Compliance/ VM state |
Yes |
Yes |
Yes |
||
|
Hide/show info columns in the list of recovery servers |
Yes |
Yes |
Yes |
||
|
Search through the list of recovery servers |
Yes |
Yes |
Yes |
||
|
Select multiple items in the list of recovery servers |
Yes |
Yes |
Yes |
||
|
View properties of a recovery server |
Yes |
Yes |
Yes |
||
|
View plan of a recovery server |
Yes |
Yes |
Yes |
||
|
Starting/stopping prod failover for recovery server |
Yes |
No |
No |
||
|
Starting/stopping test failover for recovery server |
Yes |
No |
Yes |
||
|
Run now (run backup plan) |
Yes |
No |
No |
||
|
View activities of a recovery server |
Yes |
Yes |
Yes |
||
|
Cancel failover of a recovery server |
Yes |
No |
No |
||
|
Failback to VM: starting data transfer |
Yes |
No |
No |
||
|
Failback switchover |
Yes |
No |
No |
||
|
Failback validation |
Yes |
No |
No |
||
|
Failback viewing status and progress |
Yes |
Yes |
Yes |
||
|
Failback cancellation |
Yes |
No |
No |
||
|
Failback: confirm |
Yes |
No |
No |
||
|
Failback to physical machine: start |
Yes |
No |
No |
||
|
Failback to physical machine: switchover |
Yes |
No |
No |
||
|
Failback to physical machine: confirm (Machine is restored) |
Yes |
No |
No |
||
|
Recovery of a recovery server |
Yes |
No |
No |
||
|
Power on/off of a recovery server |
Yes |
No |
Yes |
||
|
Console |
Yes |
No |
Yes |
||
|
Edit recovery server settings |
Yes |
No |
No |
||
|
View recovery server settings |
Yes |
No |
Yes |
||
|
Delete recovery server |
Yes |
No |
No |
||
|
Create a recovery server (devices - unmatched devices - protect) |
Yes |
No |
No |
||
|
Connect (Microsoft Azure location) |
Yes |
No |
No |
||
|
List VM sizes/Disk types |
Yes |
Yes |
Yes |
||
|
Primary servers |
View the list of primary servers |
Yes |
Yes |
Yes |
|
|
Sort the list of primary servers by Names/ Status/ State/ RPO Compliance/ VM state |
Yes |
Yes |
Yes |
||
|
Hide/show info columns in the list of primary servers |
Yes |
Yes |
Yes |
||
|
Search through the list of primary servers |
Yes |
Yes |
Yes |
||
|
Select multiple items in the list of primary servers |
Yes |
Yes |
Yes |
||
|
Create a new primary server |
Yes |
No |
No |
||
|
View properties of a primary server |
Yes |
Yes |
Yes |
||
|
View plan of a primary server |
Yes |
Yes |
Yes |
||
|
Edit plan of a primary server |
Yes |
No |
No |
||
|
Run now |
Yes |
No |
No |
||
|
View activities of a primary server |
Yes |
Yes |
Yes |
||
|
Recovery of a primary server |
Yes |
No |
No |
||
|
Power on/off a primary server |
Yes |
No |
Yes |
||
|
Console |
Yes |
No |
Yes |
||
|
Edit primary server settings |
Yes |
No |
No |
||
|
View primary server settings |
Yes |
No |
Yes |
||
|
Delete primary server |
Yes |
No |
No |
||
|
Connectivity |
Overview |
View status of all connections (local site - VPN tunnel - Cloud site point-to-site, site-to-site, IPSec) |
Yes |
Yes |
Yes |
|
Reinstall VPN gateway |
Yes |
No |
Yes |
||
|
Capture network packets |
Yes |
No |
Yes |
||
|
View info about VPN appliance |
Yes |
Yes |
Yes |
||
|
Download log of VPN appliance |
Yes |
Yes |
Yes |
||
|
Unregister VPN appliance |
Yes |
No |
No |
||
|
View info about VPN gateway |
Yes |
Yes |
Yes |
||
|
Download log of VPN gateway |
Yes |
Yes |
Yes |
||
|
Request tcpdump collection on VPN gateway |
Yes |
Yes |
Yes |
||
|
Request tcpdump collection on VPN appliance |
Yes |
Yes |
Yes |
||
|
View list of local servers |
Yes |
Yes |
Yes |
||
|
View list of active poin-to-site connections |
Yes |
Yes |
Yes |
||
|
View and sort the list of all cloud servers |
Yes |
Yes |
Yes |
||
|
Go to a server from the list of all cloud servers |
Yes |
Yes |
Yes |
||
|
View network info |
Yes |
Yes |
Yes |
||
|
Add/edit cloud network |
Yes |
No |
No |
||
|
Mass moving servers into another network |
Yes |
No |
No |
||
|
IPSec connection: Show network policies |
Yes |
Yes |
Yes |
||
|
IPSec connection: View IPsec/IKE security settings |
Yes |
Yes |
Yes |
||
|
IPSec connection: Change Pre-shared Key |
Yes |
No |
No |
||
|
IPSec connection: Disable/Enable connection |
Yes |
No |
Yes |
||
|
Properties |
Show/hide properties |
Yes |
Yes |
Yes |
|
|
Turn on / turn off site-to-site connection |
Yes |
No |
Yes |
||
|
Site-to-site: download VPN appliance |
Yes |
Yes |
Yes |
||
|
Site-to-site: View local routing |
Yes |
Yes |
Yes |
||
|
Site-to-site: Edit local routing |
Yes |
No |
No |
||
|
Site-to-site: Download IPsec configuration and logs |
Yes |
Yes |
Yes |
||
|
Turn on / turn off VPN access to local site |
Yes |
No |
Yes |
||
|
Point-to-site: re-generate configuration file |
Yes |
No |
Yes |
||
|
Point-to-site: download configuration for OpenVPN |
Yes |
No |
Yes |
||
|
Point-to-site: view info on how to connect |
Yes |
Yes |
Yes |
||
|
Reassign servers IPs |
Yes |
No |
No |
||
|
DHCP: Download the list of MAC addresses |
Yes |
No |
Yes |
||
|
Run books |
Create runbook |
Yes |
No |
No |
|
|
Start/stop runbook in prod failover |
Yes |
No |
No |
||
|
Start/stop runbook in test failover |
Yes |
No |
Yes |
||
|
Edit a runbook |
Yes |
No |
No |
||
|
View the history of runs |
Yes |
Yes |
Yes |
||
|
View runbooks |
Yes |
Yes |
Yes |
||
|
View execution of a runbook |
Yes |
Yes |
Yes |
||
|
Press "Done" for manual activities in a runbook |
Yes |
No |
No |
||