PowerProtect Data Manager implements a granular Role-Based Access Control (RBAC) model to maintain system security and compliance. Monitoring and exporting logs that contain sensitive administrative actions is restricted to high-level roles.

Security Administrator: This role is specifically designed to manage security-related aspects of PPDM, including user management, certificates, and the auditing of system access. Consequently, they have full access to view and export audit logs for compliance reporting.

Administrator: This role has full 'super-user' privileges within the PPDM UI and can perform any action, including infrastructure management and security auditing.

Restricted Roles: While a Backup Administrator can manage policies and a Restore Administrator can perform data recovery, they do not have the security-level permissions required to access the audit trail. The root user is an operating system-level account used for appliance maintenance via SSH, but it is not a selectable role within the PPDM UI's RBAC system for log management.