PowerProtect Data Manager utilizesRole-Based Access Control (RBAC)to ensure that only authorized users can perform specific tasks. When performing recovery operations, especiallyspecialized ones like aPowerStore file-level restore, the system verifies the permissions associated with the logged-in account.

Administrator:This role has unrestricted access to the PowerProtect Data Manager system. It includes the ability to manage infrastructure, protection policies, and initiate any restore operation across all asset types.

Restore Administrator:This specific role is designed for users whose primary responsibility is data recovery. Users assigned this role can browse protected assets and initiate restore jobs, but they lack the permissions to change system-wide settings or security configurations.

Other roles likeBackup Administratorare primarily focused on the creation and management of protection policies, while theSecurity Administratormanages certificates and user access but does not typically handle the data restoration workflow.