User Privileges for Delphix Objects
Delphix Administration / Users, Permissions, and Policies / Users and Groups / User Privileges for Delphix Objects

This topic describes the user privileges for Delphix objects.

Provisioner, Owner, Data Operator, and Reader Privileges

The user roles on Delphix objects consist of four types, which the Engine Admin user assigns: Provisioner, Owner, Data Operator, and Reader. These privileges apply both to objects, such as dSources and Virtual Databases (VDBs), and to groups, which are containers that hold those objects.

The Engine Admin user can assign privileges to groups, dSources and VDBs. Privileges are inherited, meaning that privileges assigned to a group are effective for the dSources and VDBs contained in that group.

If a user does not have a privilege in relation to an object or group, then he or she has no visibility into that object or group.

All commands are limited by the privilege level of the user who is executing them. For example, a user with Reader privileges cannot execute the Virtual to Physical command.

Owner Rights for Target Group

In order to provision a VDB to a target group, you must also have owner privileges for that group.

Roles and Privileges for Delphix Objects

Only admin and Self-Service Only users have access to the Delphix Self Service (Jet Stream) UI and objects (bookmarks, templates etc).

RoleObject PrivilegesGroup Privileges
Owner
  • Can provision VDBs from owned dSources and VDBs
  • Can perform Virtual to Physical (V2P) from owned dSources and VDBs
  • Can access the same statistics as a Reader
  • Can refresh or rollback VDBs
  • Can snapshot dSources and VDBs


  • Can provision VDBs from all dSources and VDBs in the group
  • Can refresh or rollback all VDBs in the group
  • Can snapshot all dSources and VDBs in the group
  • Can perform Virtual to Physical (V2P) from owned dSources and VDBs
  • Can view Templates for policies.
  • Can not create, edit, or delete a policy template from the policy page.
  • Can assign Owner privileges for dSources and VDBs
  • Can access the same statistics as a Provisioner, Data Operator, or Reader
Provisioner
  • Can access statistics on the dSource, VDB, or snapshot such as usage, history, and space consumption
  • Can provision VDBs from owned dSources and VDBs
  • Can access statistics on all dSources, VDBs, or snapshots in the group such as usage, history, and space consumption
  • Can provision VDBs from all dSources and VDBs in the group
Data Operator
  • Can access statistics on the dSource, VDB, or snapshot such as usage, history, and space consumption
  • Can refresh or rollback VDBs
  • Can snapshot dSources and VDBs
  • Can access statistics on all dSources, VDBs, or snapshots in the group such as usage, history, and space consumption
  • Can refresh or rollback all VDBs in the group
  • Can snapshot all dSources and VDBs in the group
Reader
  • Can access statistics on the dSource, VDB, or snapshot such as usage, history, and space consumption
  • Can access statistics on all dSources, VDBs, or snapshots in the group such as usage, history, and space consumption
Self-Service Only
  • In the Delphix Self Service (Jet Stream) UI this user can:
    • Refresh
    • Restore
    • Bookmark
    • Reset
    • Branch
    • Stop/Activate
    • Share
  • None as this user is Delphix Self Service only and has no access to the Admin App