User Roles and Permitted Operations

VMware Live Cyber Recovery end user roles provide access to specific features and functionality.

Role	Permitted Operations
Orchestrator Admin	This user role can perform all operations listed in this table, except for creating a subscription.
Data Protection Auditor	View the UI read-only: Lists, tasks, reports, dialogs (except user management) Create PDF of a compliance report and download it Note: All other roles include this level of access.
Recovery Admin	Recovery plans Create, edit, delete, duplicate recovery plans Test disaster recovery Run a recovery plan to test disaster recovery Stop a test disaster recovery (no cleanup) Cancel test disaster recovery Roll back test disaster recovery Retry failed tasks for a completed test disaster disaster recovery Retry failed tasks in a step and continue Ignore failure and continue without retry Continue tasks after user confirmation View recovery results Disaster recovery Run recovery plan for disaster recovery Preview disaster recovery Stop a running task Cancel disaster recovery Retry failed tasks for a completed disaster recovery operation Retry failed tasks in a step and continue Ignore failures, continue without retry Continue task post user confirmation Commit plan after recovery Ransomware recovery Run plan for ransomware recovery Recover VMs during ransomware recovery Open ransomware recovery security console (also requires at least one Carbon Black Cloud role)
Protection Admin	Cloud file system Deploy a cloud file system Note: After you deploy the first cloud file system, contact VMware support for assistance deploying more. API token Configure API token Protected sites Create, update, delete a protected site Add or remove a Cyber Recovery connector to/from a protected site Add or remove a vCenter Server to/from a protected site Run a connectivity check for the Cyber Recovery connector Protection groups Create, edit, delete a protection group Activate/deactivate protection group Schedule, take, delete snapshots Restore, edit, delete a snapshot VMs Restore VM Guest file recovery Ransomware recovery Run a plan for ransomware recovery
Recovery Tester	Recovery plan Create, edit, delete, duplicate a recovery plan Test recovery Run a test recovery Stop a test recovery Cancel a test recovery Rollback a test recovery Retry failed tasks Ignore failed tasks View and clear alarms
Recovery SDDC admin	Recovery SDDCs Configure an API token Deploy or add, edit, delete a recovery SDDC Add, rename, or delete a network on an SDDC Request a new public IP address Rename or delete a public IP address Add, remove hosts Add, edit, delete NAT rules Add, edit, delete new firewall rules API token Configure API token
Global Console Admin	View existing deployments and their metadata Create a new VMware Live Cyber Recovery deployment in any of the supported regions Delete a partial/failed deployment Query offers with all pricing information View existing subscriptions and pricing Create new commit subscriptions
Deployent Admin (activation)	Create a new VMware Live Cyber Recovery deployment in any of the supported regions View existing deployments and their metadata.
Deployment Admin (deactivation)	Delete any existing deployment in any of the regions Delete a partial/failed deployment View existing deployments and their metadata
Subscription Admin	View term subscriptions and pricing Create new commit subscriptions