Overview
Druva administrators use the services enabled for their account to protect data created and managed on devices and servers in their organization. Druva administrators are categorized as follows:
Druva Cloud Administrator
Product Administrators
Administrators for inSync
Administrators for Enterprise Workloads
Druva Cloud Administrator
A Druva Cloud Administrator is a super administrator account manager who can:
Create additional Druva Cloud Administrator
Create product administrators
Use inSync services enabled for the account
Use Enterprise Workloads services enabled for the account
Configure and manage Single Sign-On (SSO)
Can login to Druva Cloud Platform Console without SSO (failsafe administrator privilege)
Enable or disable Geofencing
Enforce a Password Policy
Druva Cloud Administrators get all the rights of all the administrative roles across products based on the services enabled for your account and the privileges needed to modify account settings.
inSync Administrator
For optimized use of Druva services, a Druva Cloud Administrator creates administrators to backup and restore data that resides on user endpoints such as laptops, desktops, and cloud apps like Microsoft 365. To prevent unauthorized account configuration and restrict access to user data, a Druva Cloud Administrator assigns roles that define the rights available to inSync administrators. inSync administrator roles are described below:
The following table lists the predefined administrator roles for each edition.
📝 Note
Legal Hold Management rights can be assigned to any role.
Administrator Role | Available in | Description |
Druva Cloud Administrator | Available for all license types | Druva Cloud Administrator can configure Druva services (inSync and Druva) and has the privileges to set up and manage the product account create another Druva Cloud Administrator and other administrators. Only a Druva Cloud Administrator can manage another Druva Cloud Administrator. Also, a Druva Cloud Administrator inherits the privileges of the Cloud Administrator. |
Cloud Administrator | Available for all license types | An administrator assigned to this role can perform all core inSync activities, such as configuring, managing, and monitoring inSync. Cloud Administrators can create and manage other administrators and also manage another Cloud Administrator. Cloud Administrators can configure a compliance policy. They can also place and view users on legal hold. |
Workload Administrator | Available for all license types | An administrator assigned to this role can manage operations for a specific data source individually. For example, a Workload Administrator for the Endpoints data source will have rights only related to Endpoints. Similarly, a Data Source administrator for Microsoft 365 > Exchange Online, will have access to only Exchange Online and to no other workloads. |
Data Protection Administrator |
| An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage data privacy and data access settings for the users. The Data Protection administrator cannot place or view users on Legal Hold. |
Help Desk Administrator | Available for all license types | An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage day-to-day activities such as performing backup and restore operations, resetting passwords for the users, and addressing user complaints. The Help Desk administrator cannot place or view users on legal hold. |
Legal Administrator |
| An administrator assigned to this role can perform activities related to Legal Hold, such as creating and deleting ##############{{legalhold}} policies, viewing users who are on legal hold, adding and removing users from legal hold, viewing and accessing backed up data, viewing, managing, and deleting Legal Hold clients. |
Profile Administrator | Available for all license types | An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to manage users and devices and backups and restores. Profile administrators can access the Non-Compliant report only for the profiles that they are mapped to. However, they cannot view the compliance summary at the Sensitive Data Governance Dashboard or configure a compliance policy. Additionally, profile administrators cannot place or view users on legal hold. |
Sensitive Data Governance Administrator | Elite Plus (deprecated) Or with the Sensitive Data Governance | An administrator assigned to this role has access to all pages of Sensitive Data Governance and they can define, edit, and delete policies, templates, and sensitive data and edit compliance settings. They also have access to inSync reports. |
View Only Administrator | Available for all license types | An administrator assigned to this role has restricted access associated with their profiles. They have the necessary permissions to view the inSync settings and user details. They also have access to inSync reports. The View Only administrator cannot place or view users on legal hold. |
Based on the administrator roles, rights are allocated to the administrators. For more information on roles and rights, see Predefined roles and rights .
Enterprise Workloads Administrator
For optimized use of Druva services, a Druva Cloud Administrator can create Enterprise Workloads administrators to backup and restore data that reside on remote servers such as virtual machines and NAS devices. To prevent unauthorized account configuration, a Druva Cloud Administrator assigns roles to the Enterprise Workloads administrators that specify the rights available to them. Enterprise Workloads administrator roles are described below:
Administrator role | Description |
Cloud Administrator | An administrator with this role can create organizations, register servers under an organization, configure servers for backup and restore, and use Enterprise Workloads services to control data protection activities. |
Organization Administrator | Organization administrators can register servers under the organization they are assigned to and configure them for backup and restore. |
Group Administrator | Group administrators have restricted access to the associated administrative groups. They have necessary permissions for administrative group-related activities, such as managing servers belonging to their administrative groups. |
Based on the administrator roles, rights are allocated to the administrators. For more information on roles and rights, see Predefined roles and rights .
Create New Administrator
❗ Important
It is recommended to have a secondary administrator within your organization at any given time to avoid service disruptions if one of the administrators cannot log in or is no longer with the company.
After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrator and Cloud administrator can reset the password of other administrators in your organization.
If you are a Druva, inSync, or Enterprise Workloads Cloud administrator, perform the following steps to create a new administrator:
Launch a web browser and
For inSync Cloud, type the https://login.druva.com URL in the address bar and press enter.
For inSync GovCloud, type the https://loginfederal.druva.com URL in the address bar and press enter.
On the login page, enter the email ID and click Next .
If you have not configured SSO, enter the password to log on to Druva Cloud Platform Console. If you have configured SSO, you will be navigated to the identity provider page , wherein you need to provide your credentials to log on to the Druva Cloud Platform Console.
After login, go to Druva Cloud Platform Console Global Navigation > Manage Administrator.
On the Administrators page, click New Administrator .
Creating a new Druva Cloud Administrator account : To create a Druva Cloud Administrator account:
On the Create New Administrator page, provide Name , Email , Country , and Time Zone .
In the Administrator Role section, select Druva Cloud Administrator and click Save .
Creating a new administrator for inSync account: To create an inSync administrator:
On the Create New Administrator page, provide Name , Email , Country , and Time Zone .
In the Administrator Role section, select Product Administrator > inSync.
From the Roles drop-down list, select the role you intend to assign to the administrator. Based on the administrator roles selected, assign the workload, profile, and Legal Hold type to the administrator.
Click Save .
📝 Note
You must assign at least one workload for the roles that have workloads associated with them. Ensure that you have licenses for the workloads you are assigning.
You can assign a custom role (with both Legal Hold and Non-Legal Hold Management rights) to the administrator. After assigning a custom role, it is recommended to select at least one Legal Hold type to provide access to the Legal Hold type data.
For more information about creating an inSync administrator, see Creating an inSync administrator.
Creating a new administrator for Enterprise Workloads account: To create an Enterprise Workloads administrator:
On the Create New Administrator page, provide Name , Email , Country , and Time Zone .
In the Administrator Role section, select Product Administrator > Enterprise Workloads.
From the Roles drop-down list, select the role you intend to assign to the administrator.
Click Save .
For more information about creating an Enterprise Workloads administrator, see Manage administrator accounts.
After creating an administrator, an email will be sent to the specified email address, and the recipient can log in using the details mentioned in the email.
Administrators Page
The administrator page lists the administrators in an account, and only a Druva, inSync, or Enterprise Workloads Cloud administrator can access this page. It provides filters to easily segregate the administrators based on their role and a search bar to let users easily find administrators and their information. In addition, this page provides the New Administrator button to add administrators to the account.
You can click on an administrator and navigate to the administrator details page. From the administrator details page, you can edit administrator settings such as name, country, time zone, rights, and roles. You can also reset the password for the administrator and delete the administrator.
Details Page
To access the Administrator details page:
Go to Druva Cloud Platform Console Global Navigation > Manage Administrators .
Click on the administrator you want to see or update. The administrator details page appears and shows the information about the selected administrator.
❗ Important
The administrator details page for Cloud administrators in Enterprise Workloads displays rights to access the Druva Cloud settings; however, the Cloud administrators cannot modify the Druva Cloud settings.
Summary
Provides administrator information such as the email ID, country, time zone, administrator role, and who added the user as an administrator.
inSync rights
For Druva Cloud Administrators, all inSync rights are available. The administrator can use all profiles and has access to all Legal Hold policies. However, rights are disabled for administrators in inSync with different roles. For example, administrators with roles specified as View Only cannot access profiles. For more information, see Predefined roles and rights . Few rights are exclusive to Cloud Administrators and Legal Administrators. If the role in the summary section is defined as Cloud Administrator, Enterprise Workloads rights sections are unavailable for the administrator.
Enterprise Workloads rights
For Druva Cloud Administrators, all Enterprise Workloads rights are already available, and the role is Cloud Administrator. Druva Cloud Administrator can access all organizations and use all Enterprise Workloads services enabled for the account. However, access control only shows the organization allocated to the administrator if the administrator's role is specified as an Organization administrator.
If the role in the summary section is defined as Cloud Administrator, inSync rights sections are unavailable for the administrator.
Edit
Use the Edit button to change details such as name, country, time zone, rights, and roles. Options to change the details are based on the rights available to the administrator who can access the details page.
Change Password
To change the password associated with your account, do the following steps:
Click the Change Password button. The Change Password window appears.
In the Enter current Password box, type your current password.
In the Enter new Password box, type your new password.
In the Re-enter new Password box, type the password you provided in Step 3.
📝 Note
The password can only be changed in accordance with the Password Policy configured for your organization.Click Ok .
Filter Administrators based on the last login
Administrators filters help you to monitor product-specific administrators and audit the last logins for the administrators to uncover any security risks.
Filters | Description |
Product | Select the product to filter the list of administrators associated with it.
|
Last Login Before | Select the duration to filter administrators who didn’t log in during that duration. For example, if you select seven days, all the administrators who didn’t login in the last seven days are listed. You can select the duration:
|
Reset Password
❗ Important
After you set your new password, ensure you keep the password secure and remember it. Druva does not have access to your data and cannot reset your account password if you forget it. Only the Druva Cloud Administrators and Cloud administrators can reset the password of other administrators in your organization.
To reset the password associated with the other administrator's account, do the following steps:
Go to Druva Cloud Platform Console Global Navigation> Manage Administrators .
Click the administrator for whom you want to reset the password.
Click Reset Password .
Click Yes in the message window displayed. Email is sent to the administrator with the necessary details to reset the password.
❗ Important
An email containing a link to reset the password is sent to the administrator and is valid for 24 hours only. If the password link expires before the password is reset, the administrator can resend the invitation email.