Multi-Party Authorization for Requests Initiated by a Storage Management System
An illustrative method includes a storage management system detecting one or more conditions associated with a storage system; initiating, based on the detecting the one or more conditions, a request to perform a restricted operation with respect to the storage system; transmitting, based on the initiating of the request, a notification associated with the request to a plurality of entities each having authority to perform an authorization event pertaining to the restricted operation; detecting that a threshold plurality of authorization events pertaining to the restricted operation are performed by the plurality of entities; and performing, based on the detecting that the threshold plurality of authorization events are performed by the plurality of entities, the restricted operation.
1 . A method comprising:
detecting, by a storage management system, one or more conditions associated with a storage system;
initiating, by the storage management system based on the detecting the one or more conditions, a request to perform a restricted operation with respect to the storage system;
transmitting, by the storage management system based on the initiating of the request, a notification associated with the request to a plurality of entities each having authority to perform an authorization event pertaining to the restricted operation;
detecting, by the storage management system, that a threshold plurality of authorization events pertaining to the restricted operation are performed by the plurality of entities; and
performing, by the storage management system based on the detecting that the threshold plurality of authorization events are performed by the plurality of entities, the restricted operation.
2 . The method of claim 1 , wherein:
the detecting the one or more conditions associated with the storage system comprises detecting a condition that indicates that a software update needs to be applied to the storage system; and
the request to perform the restricted operation comprises a request to apply the software update to the storage system.
3 . The method of claim 1 , wherein:
the detecting the one or more conditions associated with the storage system comprises detecting a condition that indicates that additional storage space needs to be allocated to the storage system; and
the request to perform the restricted operation comprises a request to allocate the additional storage space to the storage system.
4 . The method of claim 1 , wherein:
the detecting the one or more conditions associated with the storage system comprises detecting a condition that indicates that one or more recovery datasets should be deleted from the storage system; and
the request to perform the restricted operation comprises a request to delete the one or more recovery datasets from the storage system.
5 . The method of claim 1 , wherein the detecting the one or more conditions associated with the storage system comprises:
monitoring one or more metrics associated with the storage system;
providing metric data representative of the monitored one or more metrics to a machine learning model;
detecting the one or more conditions based on an output of the machine learning model.
6 . The method of claim 1 , wherein the initiating the request is performed automatically in response to the detecting the one or more conditions.
7 . The method of claim 1 , wherein the initiating the request is further based on manual input provided by a user.
8 . The method of claim 1 , further comprising abstaining from performing the restricted operation until the threshold plurality of authorization events are performed by the plurality of entities.
9 . The method of claim 1 , wherein the restricted operation comprises an operation with respect to a recovery dataset configured to be used by the storage system to recover from a data corruption event within the storage system.
10 . The method of claim 9 , wherein the operation with respect to the recovery dataset is configured to perform at least one of a deletion of the recovery dataset, a modification of the recovery dataset, a modification of a policy associated with the recovery dataset, or a modification of a parameter included in a data protection parameter set associated with the recovery dataset.
11 . The method of claim 1 , wherein the restricted operation comprises a modification of a policy that governs one or more operations performed with respect to the storage system.
12 . The method of claim 11 , wherein the policy identifies the plurality of entities.
13 . The method of claim 1 , wherein the performing the restricted operation is further based on the threshold plurality of authorization events being performed within a predetermined amount of time.
14 . The method of claim 1 , wherein the detecting that the threshold plurality of authorization events are performed by the plurality of entities comprises detecting that the threshold plurality of authorization events are performed by a majority of entities included in a set of entities having authorization to perform the authorization events.
15 . The method of claim 1 , wherein the detecting that the threshold plurality of authorization events are performed by the plurality of entities comprises detecting that a first set of authorization events are performed by a first minimum threshold number of entities included in a first set of entities and that a second set of authorization events are performed by a second minimum threshold number of entities included in a second set of entities.
16 . The method of claim 1 , wherein the performing the restricted operation comprises directing the storage system to perform the restricted operation.
17 . The method of claim 1 , wherein the storage management system is implemented by a computing system communicatively coupled to the storage system by way of a network.
18 . The method of claim 1 , wherein the storage management system is implemented by a controller within the storage system.
19 . A system comprising:
a memory storing instructions; and
one or more processors communicatively coupled to the memory and configured to execute the instructions to perform a process comprising:
detecting one or more conditions associated with a storage system;
initiating, based on the detecting the one or more conditions, a request to perform a restricted operation with respect to the storage system;
transmitting, based on the initiating of the request, a notification associated with the request to a plurality of entities each having authority to perform an authorization event pertaining to the restricted operation;
detecting that a threshold plurality of authorization events pertaining to the restricted operation are performed by the plurality of entities; and
performing, based on the detecting that the threshold plurality of authorization events are performed by the plurality of entities, the restricted operation.
20 . A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
detecting one or more conditions associated with a storage system;
initiating, based on the detecting the one or more conditions, a request to perform a restricted operation with respect to the storage system;
transmitting, based on the initiating of the request, a notification associated with the request to a plurality of entities each having authority to perform an authorization event pertaining to the restricted operation;
detecting that a threshold plurality of authorization events pertaining to the restricted operation are performed by the plurality of entities; and
performing, based on the detecting that the threshold plurality of authorization events are performed by the plurality of entities, the restricted operation.