Site Recovery Manager includes a set of roles. Each role includes a set of privileges, which allow users with those roles to complete different actions.
Roles can have overlapping sets of privileges and actions. For example, the Site Recovery Manager Administrator role and the Site Recovery Manager Protection Groups Administrator have the Create privilege for protection groups. With this privilege, the user can complete one aspect of the set of tasks that make up the management of protection groups.
Assign roles to users on Site Recovery Manager objects consistently on both sites, so that protected and recovery objects have identical permissions.
All users must have at least the privilege on the root folders of vCenter Server and the Site Recovery Manager root nodes on both sites.
| Role | Actions that this Role Permits | Privileges that this Role Includes | Objects in vCenter Server Inventory that this Role Can Access |
|---|---|---|---|
| Site Recovery Manager Administrator | The Site Recovery Manager Administrator grants permission to perform all Site Recovery Manager configuration and administration operations.
The Site Recovery Manager Administrator user cannot edit inherited permissions. To restrict the access of a specific user or to grant access to a user, the Site Recovery Manager Administrator must add a new role. |
|
|
| Site Recovery Manager Protection Groups Administrator | The Site Recovery Manager Protection Groups Administrator role allows users to manage protection groups.
Users with this role cannot perform or test recoveries or create or modify recovery plans. |
|
|
| Site Recovery Manager Recovery Administrator | The Site Recovery Manager Recovery Administrator role allows users to perform recoveries and reprotect operations.
Users with this role cannot configure protection on virtual machines, or create or remove recovery plans. |
|
|
| Site Recovery Manager Recovery Plans Administrator | The Site Recovery Manager Recovery Plans Administrator role allows users to create and test recovery plans.
Users with this role cannot configure protection on virtual machines, or perform recoveries or reprotect operations. |
|
|
| Site Recovery Manager Test Administrator | The Site Recovery Manager Test Administrator role only allows users to test recovery plans.
Users with this role cannot configure protection on virtual machines, create protection groups or recovery plans, or perform recoveries or reprotect operations. |
|
|
| Site Recovery Manager Remote User | The Site Recovery Manager Remote User role grants users the minimum set of privileges needed for cross site Site Recovery Manager operations. |
|
|
