What the privileged delete feature is

The privileged delete functionality of SnapLock allows a privileged user to delete a file that is otherwise immutable because of a retention policy. A privileged user should be part of the "Compliance Administrators group." A privileged user can delete a file irrespective of its retention period on a SnapLock Enterprise volume. This feature is available only on a SnapLock Enterprise volume . It is not available on a SnapLock Compliance volume. The delete operation is recorded in the SnapLock log file. All the privileged delete operations are logged in the configured SnapLock log volume. Therefore, the privileged delete feature is also known as "Auditable Delete."

In the SnapLock log file, you can find details related to the privileged deleted WORM file, such as whether a file has been deleted, when it was deleted, and who deleted the file.

The privileged delete feature is available only for SnapLock Enterprise volumes. This feature enables the compliance administrator to delete a WORM file that is retained on a SnapLock Enterprise volume. The delete operation deletes only the specified file. You can also use the privileged delete functionality on a WORM file that has infinite retention.

• How privileged delete works
  By default, a newly created SnapLock Enterprise volume does not allow privileged delete operations. The initial state of the privileged delete feature in a SnapLock Enterprise volume is uninitialized. Therefore, to use privileged delete, you need to enable the privileged delete option in the SnapLock Enterprise volume.
• Limitations of the privileged delete functionality
  Privileged delete functionality has certain limitations.
• Ensuring secure connection to the storage system
  Before you start working with privileged delete, you must ensure that session is a secure session and the SSH and Telnet sessions are distinct sessions.
• Enabling privileged delete functionality
  To use the privileged delete functionality, you need to enable it in the SnapLock Enterprise volume.
• Disabling privileged delete functionality
  You can disable or disallow the privileged delete feature in a volume. To disallow the privileged delete feature, you must first disable the privileged delete feature in the volume.
• Deleting a WORM file using privileged delete
  You can use the privileged delete feature to delete a WORM file in a SnapLock Enterprise volume before the expiration date of the file is reached. This functionality is supported only for SnapLock Enterprise volumes.
• How privileged delete affects mirroring interactions
  Using SnapMirror, you can replicate a SnapLock Enterprise volume to a non-WORM or another SnapLock Enterprise volume.