Roles, users and user groups of ROBAR-SV

Administration and operation of ROBAR-SV involve various tasks which are contained in two task areas. These task areas correspond to two roles:

• ROBAR-SV administrator (ROBAR administrator for short)
  This task area comprises the administration of ROBAR-SV and of the archive systems.

• ROBAR-SV operator (ROBAR operator for short)
  This task area comprises the operation and monitoring of ROBAR-SV and of the archive systems.

A user who takes over a task area (in other words a role) is authorized to execute all functions which are needed to implement these tasks.

The set of functions for the ROBAR administrator includes the set of functions for the ROBAR operator.

While ROBAR-SV is being installed, two user groups and one user are defined for the two ROBAR roles on the Management Unit of the SE server:

• User group robaradm for the role of the ROBAR administrator

  The ROBAR administrator must also be assigned to the robarsv user group.

• User group robarsv for the role of the ROBAR operator

• User robar as a member of the user group robarsv

The mapping between ROBAR and the SE Manager roles is described in the section "Calling the ROBAR-SV Manager".

The SE system administrator can assign further suitable local users or LDAP users to these roles (see the "Operation and Administration" manual [14]).

ROBAR administrator

A user takes on the ROBAR administrator role when he/she logs on as a user who is assigned to the user group robaradm and to the user group robarsv.

The ROBAR administrator has the following tasks and authorizations:

• Managing the ROBAR-SV instances (see "ROBAR-SV instance")
  This includes in particular starting and stopping the ROBAR-SV instances and editing the global and interface-specific configuration files of ROBAR-SV.

• Manual entry of archive system commands (see "Manual entry of archive system commands")

• Managing the ROBAR rule files (see "Modifications in the ROBAR rule files")

• Managing the global and the partner configuration (CMX) of the ROBAR server (see "Managing global configuration and backup of the ROBAR server" and "Managing the partner configuration (CMX) of the ROBAR server")

• Managing shared backup archives of the CMX and ROBAR configurations (see "Managing global configuration and backup of the ROBAR server")

• Displaying information on the users of ROBAR-SV (see "Displaying information on the users of ROBAR-SV")

To perform these tasks, corresponding functions are available to the ROBAR administrator in the ROBAR-SV Manager and in the robar menu program.

ROBAR operator

A user takes on the ROBAR operator role when he/she logs in as a user who is assigned only to the user group robarsv.

The ROBAR operator has the following tasks and authorizations:

• Managing the ROBAR-SV instances (see "ROBAR-SV instance")
  This includes in particular starting, monitoring and stopping the ROBAR-SV instances.

• Working with the programs and files of ROBAR-SV
  This includes in particular executing the commands, programs and scripts of ROBAR-SV

  The user group robarsv has read-only authorization for the ROBAR-SV configuration files in the
  /etc/robar/abba.conf.d directory.

• Observing the interface-specific configuration files for the ROBAR-SV instances (processing is the responsibility of the ROBAR administrator).

• Diagnosing the ROBAR-SV instances (see "Diagnostic information on the ROBAR-SV instance")

To perform these tasks, corresponding functions are available to the ROBAR operator in the ROBAR-SV Manager and in the robar menu program.