Domain user and group accounts

Any HCL VersionVault community must define a group to which all users who perform routine HCL VersionVault operations using a common set of VOBs and views belong.

The HCL VersionVault users group can be an existing domain global group or one created specifically for this purpose. In the examples presented here, this group is named clearusers.

The HCL VersionVault users group must have the following characteristics:
  • It must be a domain global group or an Active Directory universal group. Use a domain global group unless the group needs to include other groups.
  • If members of the group must access VOBs or views on a host running Linux® or the UNIX® system, the group name must be the same as the name of the VersionVault users group on Linux® or the UNIX® system. For more information, see Common user and group names.
Note: If your HCL VersionVault community includes multiple groups that share VOBs and views among their members but not with members of other groups, you must designate a different HCL VersionVault users group for each of these groups.
In addition to the HCL VersionVault users group, an HCL VersionVault community requires two additional domain accounts:
  • An HCL VersionVault server process user. The albd_server program runs with this identity. In examples throughout this document, the HCL VersionVault server process user is named versionvault_albd. The HCL VersionVault server process user must be a member of the HCL VersionVault administrators group. For ACLs-enabled VOBs, this account or one of its groups must have read access to the VOB object. This account or one of its groups also needs access to all elements in the VOB (in order for the cleartext storage pool to be constructed).
  • An HCL VersionVault administrators group. Members of this group can perform all HCL VersionVault operations, including those that permanently destroy data. Membership in this group should be restricted to the HCL VersionVault server process user and a few HCL VersionVault administrators.

The HCL VersionVault server process user and HCL VersionVault administrators group are normally created by the site preparation process if they do not already exist. They can also be created manually, if necessary. See Defining required domain accounts manually.