Overview
There might be a scenario where the Administrator needs to delegate data restoration access for Archived business data to specific users without granting them full administrative permissions or access to all archival sets.
By leveraging Self-Serve restores users can independently restore the data they are authorized to access, reducing dependency on administrators. This approach provides a more controlled and secure restoration experience while enabling limited access control and maintaining a more efficient, scalable data management workflow.
Key Benefits:
Restricted Access:Invited users can only view and restore data from specifically assigned Archival Sets. The user interface is streamlined to show only the restoration tools and records relevant to that user’s tasks.
Enhanced Security: By implementing Role-Based Access Control (RBAC), organizations can maintain a "least privilege" security posture.
Reduce administrative overhead: Offload routine restoration tasks to designated users.
High Level Steps:
Invitation: Invite users for Archival Restore
User Access and Restore: Users receive an email invitation to access the Archival Projects relevant to them. From their assigned Archival sets, users can select specific records, utilizing enhanced filtering options, and initiate the Restore operation.
Before you Begin
Ensure you have assigned Druva_ArchiveRestore_User permission set to the end user in the Salesforce org in order to enable Archive records access to invited users. To add permissions see enable and modify permissions.
Step 1: User Invitation
On the Salesforce App console, click Settings.
Click the Projects on the left sidebar. A list of existing projects appears on the right pane.
Select the dropdown arrow on the right of a specific project and click Invite Users. The Invite Users window appears.
Select Archive Restore Users option.
Select Environment option from dropdown.
Select the required Archival Set and Project.
Enter the user details and click Send Invite.
The invited user receives a mail for accessing the desired project.
Step 2: User Access
The invited user receives an email to access the required project and do
After logging in to the SFDC app the user can see a restricted view, typically containing only the Archived Records and Tasks tabs.
Users can select the required records from the list and click the Restore button on the top right of the record list.
Use the Filter Record button to find additional fields for the restore data.
The details of restore activities are captured in the task tab.
Key Considerations:
Existing users invited as an Admin or an Archival Restore User, the roles cannot be switched. To change the role, you must delete the existing Druva SFDC account and send a new invite.
If a System Administrator in the Salesforce org is invited as an Archived Restore User, the user can view all the Druva app functionalities, and can access only the Archived Records and Tasks pages.