VMware Live Cyber Recovery End User Roles

VMware Live Cyber Recovery end user roles provide users access to specific features.

The following table provides an overview of VMware Live Cyber Recovery roles and the features each role permits. Match the user role in each column with the capabilities in each row.

Note: VMware Live Cyber Recovery roles are additive. For example, if you want a user to create snapshots for backup and configure and run recovery plans, you must assign the Recovery Admin and Protection Admin roles to the user account.

The following table lists all roles and operations related to using the VMware Live Cyber Recovery UI.

Capability	Recovery Admin	Recovery Tester	Protection Admin	Recovery SDDC Admin	Data Protection Auditor	Orchestrator Admin
Configure API token
Edit Access lists
Edit Plans
Plan test
Plan recovery
Activating ransomware recovery services requires: Organization owner, Global Console Admin, and Orchestrator Admin roles
Run plan for ransomware recovery
Full recovery of VMs during ransomware recovery
Open ransomware recovery security console
Deploy a cloud file system
Create and edit protection groups, set snapshot schedules
VM restore, guest file recovery
Deploy the Cyber Recovery connector, create and edit protected sites, run connectivity check
Deploy/add, edit, delete SDDC
View compliance checks
Reports
View data

The following table describes all roles and operations related to recovery regions and subscriptions within the VMware Live Cyber Recovery Global Console.

Capability	Global Console Admin	Deployment Admin (activation)	Deployment Admin (deactivation)	Subscription Admin
View existing deployments and their metadata.
Create a new VMware Live Cyber Recovery deployment in any of the supported regions.
Delete a partial/failed deployment.
Delete any of the existing deployments in any of the regions.
View subscriptions and pricing
Create new subscriptions