Question about users and admins
I've been testing the software for the company I work, for now everything goes pretty well, but there is something about Units and Administrators I don't understand at all, let me know if I'm wrong:
As far as I know, everytime you add an agent to the server, to make that agent be able to access ONLY their Unit, you have to create a Windows account in server and then assign that windows account to the Unit in server console.
Is that correct? Is there a way to create an account only inside Acronis console, specially for remote agents installed through internet, and avoid to have to create a windows account into the phisical server for each agent you want to limit to a specific Unit?
Hello Ricard.
As far as I know, everytime you add an agent to the server, to make that agent be able to access ONLY their Unit, you have to create a Windows account in server and then assign that windows account to the Unit in server console.
Yes, you are correct. You will need a Windows account for accessing a Unit from remote machines (Unit administrator). You could use the same Windows account for different Units (but not an Organization unit!) with equal access rights.
You should not create a new Windows user for every new Agent. You need to create a special Unit in Acronis Backup Console, switch to this Unit in Organization:
When logged under a selected Unit, you add remote devices that will be included in this Unit.
Ok thanks a lot, now I understand.
But we need to sepparate a lot of agents, so we need to create a win account for every unit that has to be isolated just with its own data.
Hello Ricard.
Yes, you will need to create as many Units as many different access levels/areas for different Agents are required in your organization. There is no need to create a separate Windows account for each Unit: if these Unit's members should have the same access rights (on your Management Server) then you can use the same Windows account for different Units. Agents from different Units will not interfere with each other and could not view/access backups of other Units.
Hello Ricard!
You can also add user groups to AMS, so you could create a group for each different permission+machines configuration then add users who can manage these to the groups . This way you would have a more fine grained activity log of who did what as well as an easier way to revoke user access should the need arise.
-- Peter