# Grant Trustelem Data Recovery Permissions

<span lang="EN-US" style="mso-ansi-language: EN-US;">As an Vault Administrator, follow this procedure to **Grant Data Recovery Permissions** in the **Trustelem** application to an User. </span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">**Users** with this **permission** can **create data recovery requests**.</span>

### <span lang="EN-US" style="color: rgb(0, 0, 0);">Grant Recovery Permissions</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">Connect to **Trustelem**.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">Select the **User** **Menu** on the top right-hand side of the screen. The **User List** is displayed.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">**Select** the **User** to give Password Recovery permissions to and click the **Modify** button. </span><span lang="EN-US" style="mso-ansi-language: EN-US;">The **User Update screen** is displayed.</span>

[![image.png](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/scaled-1680-/SCEimage.png)](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/SCEimage.png)

<span lang="EN-US" style="mso-fareast-font-family: Calibri; mso-ansi-language: EN-US;">In the Attributes section, click the **Add an Attribute** button. A blank line is added to the **Trustelem Attributes** table.</span>

<span lang="EN-US" style="mso-ascii-font-family: Calibri; mso-fareast-font-family: Calibri; mso-hansi-font-family: Calibri; mso-ansi-language: EN-US;">Complete the fields as follows:</span>

- <span lang="EN-US" style="mso-fareast-font-family: Calibri; mso-ansi-language: EN-US;">NAME : **recovery\_data**</span>
- <span lang="EN-US" style="mso-fareast-font-family: Calibri; mso-ansi-language: EN-US;">TYPE : **bool**</span>
- <span lang="EN-US" style="mso-fareast-font-family: Calibri; mso-ansi-language: EN-US;">VALEUR : **true**</span>

Click the **Save** button to save the new attribute to the User.

The Trustelem attribute **recovery\_data** displays in the **Attribute List**.

<span lang="EN-US" style="mso-ansi-language: EN-US;">This **User** can now **[create data recovery requests](https://vault-doc.wallix.com/books/former-documentation/page/create-data-recovery-request)**.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">To manage approbator groups for data recovery, the user must have an attribute **recovery\_data\_workflow**. After that he can **[manage approbators groups](https://vault-doc.wallix.com/books/former-documentation/page/approbators-group-management "Approbators group management")**.</span>

### <span lang="EN-US" style="color: rgb(0, 0, 0);">Share cipher key  
</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">In order to enable completely the data recovery permissions, you have to share the cipher key.</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">**Important**: This step must be done after granting the *recovery\_data* attribute.</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">Go to the recovery home page (Tools &gt; Recovery in default navigation bar) and click on the "Share cipher keys" link as below:</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">[![image.png](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/scaled-1680-/5sSimage.png)](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/5sSimage.png)</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">The cipher key management page is displayed. You can now share the cipher key with any user who has the *recovery\_data* attribute:</span>

<span lang="EN-US" style="color: rgb(0, 0, 0);">[![image.png](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/scaled-1680-/U7Yimage.png)](https://vault-doc.wallix.com/uploads/images/gallery/2024-03/U7Yimage.png)</span>

Congratulations! The user can now create a data recovery request for any vault user.