Users

There are three types of users based on their permissions:
* *Super-users*. A special user account used for system administration. Super-user has full privileges.
* *Power-users*. A special user account which is allowed to utilize the most of advanced features. Power-user permissions are configurable.
* *Sub-user*. A special user account with restricted permissions. Sub-user permissions are configurable and are in bounds of Power-user permissions.

With Server Backup Manager, you can manage all types of users and assign permissions for browsing, backup, and restore.
{info:title}
If you attempt to create a user account and do not see options to create different user types, you must enable the associated functionality. For more information about enabling this feature, refer to [ServerBackupManager:Product Features].{info}

h2. {color:#000000}{*}User Types{*}{color}
----
{toc:location=top|maxLevel=3|minLevel=3|type=flat|separator=pipe|style=border:1}
----
h3. Super-users

A super-user has complete control over Server Backup Manager and can access and configure anything within the product. You cannot change the permissions of this type of user account.
{info:title}
Most organizations provide super-user accounts to authorized, experienced individuals.{info}

h6. Super-users and users/groups

The super-user creates power-users and sub-users, and then grants those accounts the permissions needed to use the various resources in Server Backup Manager.

All the users and groups in the protected machine are visible for super-users.
{info:title}
Do not treat the super-users as power-users because you cannot add super-users to groups, nor can you assign permissions to super-users on the protected machines or volumes. Also note that super-users cannot administrate sub-users.{info}

h6. Super-users and volumes/Disk Safes

Super-users can create, edit, delete, and import [volumes|Volumes]. Only super-users can remove a [Disk Safe|Disk Safes].

h6. Super-users and servers

Only a super-user can change the owner of a [protected machine|Protected Machines].
----
h3. Power-users


h6. Power-users and users/groups

Power-users can create and administrate sub-users. Power-users also cannot assign permissions to their sub-users if they do not have these permissions themselves. 

A power-user can see only those groups to which the power-user belongs and only those sub-users that the power-user owns. The number of sub-users assigned to a power-user is unlimited if it is not restricted in the power-user *Settings.*

h6. Power-users and volumes/disk safes

Power-users or groups can have the following permissions on [volumes|Volumes]:
* Create disk safes in the volume
* Close disk safes in the volume
* Delete disk safes in the volume
* Change a disk safe's server assignment
* Change a disk safe's quota
* Vacuum a disk safe

Power-users can see but not edit any volumes on which they have permission. Note that the path of the volume is hidden.
{info:title}
Sub-users and power-users do not need volume permissions to restore or browse files, or edit disk safe settings.{info}

h6. Power-users and protected machines

You can allow power-users to create and administrate protected machines  and you can set a power-user as the owner of a [protected machine|Protected Machines]. By default, a power-user that creates a protected machine is an owner.

The owner has a fully configurable set of the server permissions. A power-user can have the following permissions on the server based on the selections in the User properties window:
* Edit Protected Machine
* Edit Policies
* Edit Server's Users
* Edit Disk Safe:
** Change name and description of the Disk Safe
** Change Compression Type
** Edit Devices and Device Settings
** Change Encryption Passphrase
** Manage Recovery Points (Merge Recovery Points and Lock/Unlock Recovery Points)

h6. Power-users and restore

A power-user can have the following restore permissions:
* Browse Server Recovery Points (read-only)
* Download Files (force checks browse files)
* Restore Files (force checks browse files)
* Bare-Metal Restore
* Control Panel Restore (force checks browse files)
* MySQL Restore
* SQL Restore
* Exchange Restore

----
h3. Sub-users

Sub-users can have only one administrator or owner. You cannot create sub-users with multiple administrators.
{info:title}
Only a power-user can be an owner of a sub-user.{info}
Sub-users cannot have permissions that their power-user owners do not have.

General information about users in Server Backup Manager.
{excerpt}