Rewind Access Fabric lets you scope a person's access to specific backup configurations instead of your whole organization. This article explains what the backup configuration admin and backup configuration viewer roles do, how they compare to Rewind's other roles, and what to consider before you assign them. You can assign backup configuration roles for Jira, GitHub, and Confluence.
Covered in this article:
- Overview
- Backup configuration roles
- How these roles compare to other Rewind roles
- How to assign a backup configuration role
- Choosing a role based on Atlassian access
- Good to know
Overview
Rewind Access Fabric lets you assign a role to specific backup configurations rather than to your whole organization. A backup configuration covers a set of Jira projects, GitHub repositories, or Confluence spaces. When you assign someone to one, they can work with the backups for those projects, repositories, or spaces, and nothing else.
You can assign one person to several backup configurations. Their role stays the same across all of them.
What Rewind Access Fabric is designed for
- Giving a team or department lead access to view and restore their own backed-up data, without exposing the rest of your organization's data
- Giving auditors and stakeholders visibility into a specific set of projects, repositories, or spaces
- Giving someone day-to-day restore responsibilities without granting organization-wide access
Key benefits
- Limit what each person sees to the projects, repositories, or spaces they're responsible for.
- Let team leads view and restore their own data without granting organization-wide access.
- Give auditors read-only visibility into a specific set of backups.
Backup configuration roles
Backup configuration admin
A backup configuration admin can view and restore the backed-up data in the backup configurations they're assigned to. Restores are item-level. They can't edit the configuration, which means they can't change its backup frequency, its data retention, or which projects, repositories, or spaces it includes, and they can't run a backup. Backups continue on the configuration's schedule.
They can't see or change any other backup configuration, and they can't perform organization-wide actions such as managing users, billing, or integrations.
Backup configuration viewer
A backup configuration viewer has read-only access to the backup configurations they're assigned to. They can see the configuration, view its backup history, and browse the data it covers. They can't change anything or restore data.
Use this role for auditors and stakeholders who need visibility into a specific set of projects, repositories, or spaces.
How these roles compare to other Rewind roles
Both roles are narrower in scope than organization owner, organization admin, and integration admin. Anyone holding one of those roles can already do everything a backup configuration admin or backup configuration viewer can, within their own scope. Those roles aren't limited by Rewind Access Fabric: they can create and edit backup configurations and run backups as usual.
| Role | Scope | Can manage users and billing | Can see other backup configurations |
|---|---|---|---|
| Organization owner | Whole organization | Yes | Yes |
| Organization admin | Whole organization | Yes | Yes |
| Integration admin | Assigned integrations | No | Yes, within assigned integrations |
| Backup configuration admin | Assigned backup configurations | No | No |
| Backup configuration viewer | Assigned backup configurations, read-only | No | No |
| Read only | Assigned integrations, read-only | No | Yes, within assigned integrations |
How to assign a backup configuration role
- Log in to Rewind at app.rewind.com.
- Open Account Settings from the left menu, then select Team Collaboration.
- Click Invite member in the upper right corner, or select the pencil icon next to an existing member to change their role.
- Choose Backup configuration admin or Backup configuration viewer.
- Select which backup configurations the person should have access to.
- Click Update, or Send invite.
New members get an email invitation. Their access starts once they accept it.
Choosing a role based on Atlassian access
Rewind doesn't read or sync your Atlassian permissions — you assign Rewind roles yourself. Use the table below as a starting point for deciding which Rewind role fits someone, based on the access they already have in Jira or Confluence.
| Atlassian role | Atlassian scope | Suggested Rewind role |
|---|---|---|
| Organization admin (primary) | Whole tenant | Organization owner |
| Organization admin (additional) | Tenant, delegated | Organization admin |
| Site admin | One site | Organization admin |
| Jira admin (app admin) | One product | Integration admin for all of Jira, or backup configuration admin to limit them to specific backup configurations |
| Project admin | One project | Backup configuration admin, scoped to the backup configuration that covers that project |
| Confluence Space admin | One space | Backup configuration admin, scoped to the backup configuration that covers that space |
| User access admin | App access | Organization admin |
| Billing admin | Billing | Organization admin |
| Auditor or read-only stakeholder | Visibility | Backup configuration viewer for specific backup configurations, or read only for a whole integration |
Good to know
-
Available for Jira, GitHub, and Confluence
It's not possible to assign backup configuration roles for other integrations at this time. Use an organization-wide or integration-wide role instead. For Confluence, backup configurations are available on the Advanced and Enterprise plans of Rewind Backups for Confluence. -
A user has one role
You can't give someone backup configuration admin on one configuration and backup configuration viewer on another. Choose the role first, then choose which backup configurations it applies to. -
Restores are limited to individual items
A backup configuration admin can perform an item-level restore within the backup configurations they're assigned to. -
Not yet available for organizations that use SSO
Rewind doesn't support assigning backup configuration admin or backup configuration viewer through SSO yet, so you can't assign them in an organization that uses SSO. -
Up to 10 backup configurations appear when you assign a role
If your organization needs more than 10, please contact Rewind Support.