Two person rule enforcement for backup and recovery systems

An apparatus for updating configuration settings of a backup database supported by a data management system, comprising:

• a processor;
• memory coupled with the processor;
• and
• instructions stored in the memory and executable by the processor to cause the apparatus to:
• receive, from a first user associated with a first set of permissions and a first user group, a request to update one or more configuration settings of the backup database;
• determine that the first user is authorized to update the one or more configuration settings of the backup database in accordance with the first set of permissions associated with the first user;
• identify a second user that is authorized to approve the request from the first user in accordance with a second set of permissions associated with the second user, wherein the second user is associated with a second user group that is different from the first user group;
• transmit an indication of the request to the second user that is authorized to approve the request from the first user;
• receive a notification that the second user has approved the request from the first user;
• and
• update the one or more configuration settings of the backup database in response to the notification.

A non-transitory computer-readable medium storing code for updating configuration settings of a backup database supported by a data management system, the code comprising instructions executable by a processor to:

• receive, from a first user associated with a first set of permissions and a first user group, a request to update one or more configuration settings of the backup database;
• determine that the first user is authorized to update the one or more configuration settings of the backup database in accordance with the first set of permissions associated with the first user;
• identify a second user that is authorized to approve the request from the first user in accordance with a second set of permissions associated with the second user, wherein the second user is associated with a second user group that is different from the first user group;
• transmit an indication of the request to the second user that is authorized to approve the request from the first user;
• receive a notification that the second user has approved the request from the first user;
• and
• update the one or more configuration settings of the backup database in response to the notification.