A RecoverPoint administrator is adding a new user to the system using Unisphere. Which pre-defined user is used to add a new user?

Dell RecoverPoint employs a role-based access control (RBAC) model to enforce the principle of separation of duties. The pre-defined security-admin role is specifically designated for managing security-related functions. This includes all user account management tasks such as creating, modifying, and deleting users and their roles within the Unisphere for RecoverPoint interface. The general admin user does not have these specific security privileges.

A. admin: The admin role has broad system management privileges but is explicitly restricted from performing user management to enforce separation of duties.
B. boxmgmt: This is a special-purpose, command-line interface (CLI) only user intended for low-level RecoverPoint Appliance (RPA) diagnostics and maintenance, not for application-level user administration.
D. security: This is not a standard, pre-defined administrative user role in RecoverPoint. The correct role for security and user management is security-admin.

1. Dell EMC RecoverPoint for Virtual Machines 5.3 Security Configuration Guide, Page 21, Table 5 "Predefined user roles".

The table explicitly states the security-admin role's description is to "Manage users and security settings." It also notes the admin role can "Manage all system operations except for security settings and user management."

2. Dell EMC RecoverPoint for Virtual Machines 5.3 Administrator's Guide, Page 41, Section "Users and roles".

This section details the user management process and clarifies that "Only a user with the security-admin role can add, edit, and delete users."

3. Dell EMC RecoverPoint Concepts and Terminology Technical Notes, Page 18, Section "Security".

This document describes the security architecture, mentioning distinct roles for system administration and security administration, reinforcing the concept that the security-admin is responsible for user lifecycle management.