Microsoft System Center DPM provides eight default RBAC roles out of the box. These include the following:

• DPM Read-Only Operator: This can view everything, but can't modify or run anything
• DPM Recovery Operator: This can only perform recoveries
• DPM Reporting Operator: This can only run and manage reports
• DPM Tier-1 Support: This can resume backups, take automated recommended actions, and open a DPM Scoped Console to troubleshoot issues
• DPM Tier-2 Support: This can run backups on demand and perform corrective actions, such as enabling and disabling agents
• DPM Tape Operator: This can rerun backups or perform tape drive tasks
• DPM Tape Admin: This can perform all tape related actions
• DPM Admin: This can perform all actions on the DPM server

Before you can use RBAC with DPM, you need to have done the following:

• Imported the required SCOM Management Packs, which was previously carried out in a prior recipe in this chapter
• Installed the DPM Central Console, which was also previously carried out in a prior recipe in this chapter