Granting Authority

To grant an administrator one or more administrative privilege classes, complete the following fields and then click Finish, or click Cancel to end this task.

Privilege Class

Select an option to determine the authority for the administrator to limit the authorized set of commands. This parameter is optional when either the Policy Domains or Storage Pools parameters are specified; otherwise, this parameter is required. You may select more than one Privilege Class.

System Grants system privilege to an administrator. A system administrator has the highest level of authority in Tivoli Storage Manager. A system administrator can issue any administrative command and has authority to manage all policy domains and all storage pools. Only a system administrator can grant authority to other administrators.
Policy Grants policy privilege to an administrator. If you do not select a policy domain, unrestricted policy privilege is granted.
  • An unrestricted policy administrator can issue commands that affect all policy domains. An unrestricted policy administrator cannot define, delete, or copy policy domains.
  • A restricted policy administrator can perform the same operations as an administrator with unrestricted policy privilege, but only for specified policy domains. A restricted policy administrator can be upgraded to an unrestricted policy administrator by granting authority with the Privilege Classes parameter set to Policy and nothing selected for the Policy Domains parameter.
Storage Grants storage privilege to an administrator.
  • An unrestricted storage administrator can issue all commands that allocate and control storage resources for the server. An unrestricted storage administrator can issue commands that affect all storage pools, but cannot define or delete storage pools.
  • A restricted storage administrator can only manage authorized storage pools.A restricted storage administrator can be upgraded to an unrestricted storage administrator by granting authority with the Privilege Classes parameter set to Storage and nothing selected for the Storage Pools parameter.
Operator Grants operator privilege to an administrator. An administrator with operator privilege can issue commands that control the immediate operation of the server and the availability of storage media.
Analyst Grants analyst privilege to an administrator. An administrator with analyst privilege can issue commands that reset the counters which track server statistics.
Node Grants node privilege to an administrator. An administrator with node privilege can access a web backup-archive client with an administrative user ID and password if they have been given owner authority or access authority. The default for a node privilege class is Access authority.

Policy Domains

Select a policy domain to give restricted policy privilege to am administrator. This parameter is optional. More than one Policy Domain may be selected. If you select a policy domain, then the Privilege Classes parameter with Policy selected is optional. Restricted policy privilege permits an administrator to issue a subset of the policy commands for the domains to which the administrator is authorized.

Storage Pools

Select a storage pool to give restricted storage privilege to an administrator. If you select a storage pool, then the Privilege Classes parameter with Storage selected is optional. You may select more than one Storage Pool.