Access Rights for Export and Import
All objects can be exported by an administrator with all rights, or by an operations administrator with Backup (or Backup & Restore) rights who has Access Tools, Read All Config, Read All Resources, Read All Status, and Read All Users rights. Import requires all of the corresponding Modify rights.
• If encrypting resources when performing an export or import, you must communicate and share the encryption key that you used with others that are authorized to access those resources. There is currently no automatic way to securely share encryption keys between different TDV users.
When exporting:
• The user performing the export must have Read privileges on the selected objects and other associated rights.
• If the user performing the export has the Read All Users right, user profile definitions can be included (as in the pkg_export option -includeusers) in the export archive file. These items are disabled if the user does not have this right.
• A password for the CAR must be specified.
When importing:
• Resources captured in a CAR file can be imported to a TDV instance if the user has Write privileges on the target folders.
• Privileges are included among the items imported from a CAR file if the user performing the import has both the Modify All Resources and the Modify All Users rights.
• The password used to create the CAR file must be specified to import the CAR file. Or, if the CAR was created without a password, you can leave the password value blank.