HP StorageWorks Application Recovery Manager Installation and Licensing Guide (T4395-96002, February 2008)

Maintaining the Installation
Security Considerations
Chapter 372
NOTE By combining the Start Backup Specification with the Start
Backup user rights, a user is allowed to see the configured backup
specifications in the GUI and is able to start a backup specification or an
interactive backup.
Allowing users to perform interactive backups may not always be
desired. To allow interactive backups only for users who also have the
right to save a backup specification, set the StrictSecurityFlags flag
0x0200 in the global options file.
For more information on the global options file, refer to the online Help.
Hiding the Contents of Backup Specifications
In a high security environment, the contents of saved backup
specifications may be considered to be sensitive or even confidential
information. Application Recovery Manager can be configured to hide the
contents of backup specifications for all users, except for those who have
the Save backup specification user right. To do so, set the
StrictSecurityFlags flag 0x0400 in the global options file.
For more information about the global options file, refer to the online
Help.
Host Trusts
The host trusts functionality reduces the need to grant the Restore to
other clients user right to users when they only need to restore the
data from one client to another within a limited number of clients. You
can define groups of hosts that will trust each other with the data.
Host trusts are typically used in the following situations:
• For clients in a cluster (nodes and virtual server).
• If the hostname of a client is changed and the data from the old
backup objects needs to be restored.
• If there is a mismatch between the client hostname and backup
objects due to DNS issues.
• If a user owns several clients and needs to restore the data from one
client to another.