# Groups

Group is a central place to bind together a set of roles with users. There are already a set of predefined groups in Storware Backup & Recovery:

**Global Administrator** - user have all possible privileges.

**Virtual Environment Administrator** - the user has full permissions to the **Virtual Environment** menu. Additionally, he can read information about nodes, nodes config and backup destinations.

**Application Administrator** - the user has full permissions to the **Applications** menu. Additionally, he can read information about nodes, nodes config and backup destinations.

**Storage Administrator** - the user has full permissions to the **Storage** menu. Additionally, he can read information about nodes, nodes config and backup destinations.

**Backup Destination Administrator** - the user has full permissions to the **Backup Destination** menu. Additionally, he can read information about nodes, nodes config and virtual environment infrastructure.

**User Administrator** - the user has full permissions to the **Access Management** menu. He can create new users, roles, groups or OS credential. User in this group can modify other users except their passwords.

**Reporting Administrator** - the user can browse and export all reports.

**Read Only** - the user has full read permissions to all menu sections except **Endpoints**.

**Operator** - the user has full read permissions to all menu sections except **Endpoints**. Additionally, he can execute backup, restore, mount and snapshot tasks for all kinds of instances.

**Endpoints Server Manager** - the user has full permissions to the Endpoints Server management.

**Endpoints Administrator** - the user has full permissions to the administration of Endpoints.

{% hint style="info" %}
**Note:**

* Administrators from previous versions (4.2 and lower) have been migrated to `Global Administrators` group with all permissions available.
* Roles from previous versions (4.2 and lower) have been added the `System Level` security context.
* Automatically created accounts based on LDAP logins will have the `Operator` role by default.
* Current group management is available in Storware Backup & Recovery WebUI only (they are not mapped to LDAP groups)
  {% endhint %}