DSM/Tape Catalog User's Guide

Role-based flexibility
DSM/Tape Catalog User’s Guide—520233-008
4-3
Troubleshooting

The user is a member of the Safeguard SECURITY-MEDIA-ADMIN group.

If the user is a member of SECURITY-MEDIA-ADMIN group, then check
whether the user has sufficient permissions to execute the MEDIACOM
commands.

DENY ACL is not set for the user in the SECURITY-MEDIA-ADMIN group.

The SECURITY-MEDIA-ADMIN group exists, and the user is a member of the
group with required permissions.
If these conditions are met, check whether the group is FROZEN.
If the group is FROZEN, then only members with E and O permissions are
allowed to execute the commands.

The MEDIACOM SPR is the latest, and the requisite standard security and
Safeguard SPRs are installed on the system.
Scenario 2: A super group user cannot execute the commands DELETE TAPEFILE,
ALTER TAPEFILE, and ALTER MEDIADEFS.
To troubleshoot this issue, verify the following:

The user is a member of the Safeguard SECURITY-MEDIA-ADMIN group.

If the user is a member of SECURITY-MEDIA-ADMIN group, then check
whether the user has sufficient permissions to execute the MEDIACOM
commands.

DENY ACL is not set for the user in the SECURITY-MEDIA-ADMIN group.

The SECURITY-MEDIA-ADMIN group exists, and the user is a member of the
group with the required permissions.
If these conditions are met, check whether the group is FROZEN.
If the group is FROZEN, then only members with E and O permissions are
allowed to execute the commands.
Scenario 3: A super user cannot execute the commands DELETE TAPEFILE, ALTER
TAPEFILE, and ALTER MEDIADEFS.
To troubleshoot this issue, verify that DENY ACL is not set for the super user in the
SECURITY-MEDIA-ADMIN group. If a DENY ACL is set, then remove the DENY ACL
for the super user.
Scenario 4: Super group users are allowed to execute the commands listed in
Table 4-1 in a system configured to restrict the execution of commands only to super
users.
To troubleshoot this issue, verify the following:

Safeguard is running on the system. For more information, see Safeguard
Reference Manual.

The SECURITY-MEDIA-ADMIN exists. If it does not exist, then add the group.

Super group is added to the SECURITY-MEDIA-ADMIN group.