How to Allowlist unrecognized retrieval users in Cohesity Alta SaaS Protection

Whether you are using seamless or link-based stubbing (or both) in your Cohesity Alta SaaS Protection (CASP) environment, you may encounter scenarios where users open a stubbed item because of failed authorization. 

Keep in mind that CASP performs a data-level security check in the cloud before it satisfies any retrieval request. For this check to happen, CASP must know the user account and verify it against the permissions on the file. Thus, users' accounts must be domain accounts and be synchronized, and the user must be in the item's ACL, in order for authorization to succeed.

In the Admin Portal's Administration app, you can see a history of user accounts that have failed retrieval attempts.

If you wish to allow any of the accounts, simply select the checkbox beside their name and click the ' Allow list selected users...' button.