Manage users and groups

There are three types of users based on their permissions:

* *Super-users*. A special user account used for system administration. Super-user has full privileges.
* *Power-users*. A special user account which is allowed to utilize the most of advanced featured. Power-user permissions are configurable.
* *Sub-user*. A special user account with restricted permissions. Sub-user permissions are configurable and are in bounds of Power-user permissions.


With Server Backup Manager, you can manage all types of users and assign permissions for browsing, backup, and restore. The permissions are described further.

{info:title}
If you attempt to create a user account and do not see options to create different user types, you must enable the associated functionality. For more information about enabling this feature, see [ServerBackup:Configure product features].
{info}

The following table describes the major actions over users.
|| Function || A way to use || Server Backup Edition || Platform || Documentation ||
| h6. Adding Users |
| Adding an initial User | Installer | all | all | [Install and upgrade Server Backup Manager], \\
[Install and upgrade Backup Agent], \\
[Install and upgrade Server Backup Advanced], \\
[Install and upgrade Server Backup Free] |
| Adding supplementary Users | UI > the "Users" screen | Advanced, Enterprise | all | [Add users]\\ |
| | Configuration Utility | all | Windows | [Set up users]\\ |
| | API | Advanced, Enterprise | all | [Use the Server Backup API]\\ |
| | Linux CLI | all | Linux | [Set up users]\\ |
| h6. Resetting User Password |
| | UI > the "Users" screen | Advanced, Enterprise | all | [Change a user account password] |
| | UI > "Configuration" > "User Options" | Free | all | [Configure user options]\\ |
| | Configuration Utility | all | Windows | [Set up users]\\ |
| | API | Advanced, Enterprise | all | [Use the Server Backup API]\\ |
| | Linux CLI | all | Linux | [Set up users]\\ |
| h6. Editing Users |
| | UI > the "Users" screen | Advanced, Enterprise | all | [Edit user account properties]\\ |
| | UI > "Configuration" > "User Options" | Free | all | [Configure user options] |
| | API | Advanced, Enterprise | all | [Use the Server Backup API]\\ |
| | Linux CLI | all | Linux | [Set up users]\\ |



h2. User Types


----
{toc:location=top|maxLevel=3|minLevel=3|type=flat|separator=pipe|style=border:1}

----
h3. Super-users

A super-user has complete control over Server Backup Manager and can access and configure anything within the product. You cannot change the permissions of this type of user account.

{info:title}Most organizations provide super-user accounts to authorized, experienced individuals.
{info}

h6. Super-users and users/groups

The super-user creates power-users and sub-users, and then grants those accounts the permissions needed to use the various resources in Server Backup Manager.

!users3.png!

All the users and groups in the server are visible for super-users.
{info:title}Do not treat the super-users as power-users because you cannot add super-users to groups nor can you assign permissions to super-users on the servers or volumes. Also note that super-users cannot administrate sub-users.
{info}

h6. Super-users and volumes/disk safes

Super-users can create, edit, delete, and import [volumes|Manage volumes]. Only super-users can remove a [disk safe|Manage Disk Safes].

h6. Super-users and servers

Only a super-user can change the owner of a [server|Manage servers].

----
h3. Power-users


h6. Power-users and users/groups

Power-users can create and administrate sub-users. Power-users also cannot assign permissions to their sub-users if they do not have these permissions themselves. 

A power-user can see only those groups to which the power-user belongs and only those sub-users that the power-user owns. The number of sub-users assigned to a power-user is unlimited if it is not restricted in the power-user *Settings*, as shown in the following image.

!Create New User_Enterprise_sub-users checkbox_English.png!

{info:title}Sub-users and power-users do not need volume permissions to restore or browse files, or edit disk safe settings.
{info}

h6. Power-users and servers

You can allow power-users to create and administrate servers based on the selection shown in the following image.


!Create New User_Enterprise_servers checkbox_English.png!
You can set a power-user as the owner of a [server|Manage servers]. By default, a power-user that creates a server is an owner.


The owner has a full configurable set of the server permissions. A power-user can have the following permissions on the server based on the selections in the User properties window:
* Edit Server
* Edit Policies
* Edit Server's Users
* Edit Disk Safe:
** Change name and description of the Disk Safe
** Change Compression Type
** Edit Devices and Device Settings
** Change Encryption Passphrase
** Manage Recovery Points (Merge Recovery Points and Lock/Unlock Recovery Points)

h6. Power-users and restore

A power-user can have the following restore permissions based on the selections in the User properties window:
* Browse Server Recovery Points (read-only)
* Download Files (force checks browse files)
* Restore Files (force checks browse files)
* Bare-Metal Restore
* Control Panel Restore (force checks browse files)
* MySQL Restore
* SQL Restore
* Exchange Restore

!Edit User_restore and browse permissions selected_English.png!

----
h3. Sub-users

Sub-users can have only one administrator or owner. You cannot create sub-users with multiple administrators.
{info:title}Only a power-user can be an owner of a sub-user.
{info}
Sub-users cannot have permissions that their power-user owners do not have.

!users4.png!

Groups and other users are not visible for sub-users.

----
h3. Groups

A group contains a collection of power-users to which you can apply permissions. You can grant permission to a group in the same way as granting permissions to a power-user. Power-users can belong to more than one group.
{info:title}Only power-users can be members of groups.
{info}
A power-user's permissions include their user-level permissions plus all of their group permissions.

If a group is not granted any permissions, but a specific power-user in that group has permissions, then the power-user still has these permissions.

If a group is granted full-control access on a server, but a specific power-user in that group has permissions set on that server that are less than full-control, then the group permissions are used.

If a power-user belongs to multiple groups, and two or more of those groups have permissions set on the same resource, such as a server, then the most liberal group-level permissions are applied. If one group has less than full-control access, but another group has full-control, the power-user is granted full-control access.

{panel:title=Section Content}
{children:excerpt=true}
{panel}{excerpt:hidden=true}General information about users and user groups in Server Backup Manager.{excerpt}