Patent ID: 8880466

Claim:
At least one non-transitory, computer-readable storage medium carrying instructions, which when executed by at least one data processor, manages data in a data management system, wherein the data management system manages secondary copies of data files, comprising: for at least one user of the data management system, adding the user to a previously created group within the data management system, wherein the group associates one or more users with at least one data management right related to storage operations for the secondary copies of data files; receiving a request from the user to perform a data management operation, wherein the data management operation includes a read or write operation with respect a secondary copy of a production data file, and wherein the secondary copy is used to restore production data from the production file from which the secondary copy is created; causing a security system to be queried to determine data management rights of the user, wherein the data management rights include the user's rights to access the production data file, and, causing the requested data management operation to be performed when the data management rights permit the data management operation, wherein the data management rights permit the data management system to perform the data management operation if the production data file is associated with an acceptable one or more computers; wherein adding the user to the created group within the data management system includes associating the user with the created group in the security system; and wherein causing the requested data management operation to be performed includes determining data users within the group can access.