Veritas NetBackup™ Appliance Administrator's Guide
- Overview
- About NetBackup appliances
- About the Primary Server role
- About the media server role
- About accessing the NetBackup Appliance Web Console
- About the NetBackup Appliance Shell Menu
- About appliance console components
- About the NetBackup Appliance Web Console login page
- NetBackup appliance home page
- Common tasks in NetBackup appliance
- About the NetBackup appliance documentation
- Monitoring the NetBackup appliance
- About monitoring the NetBackup appliance
- About hardware monitoring and alerts
- About Symantec Data Center Security on the NetBackup appliance
- Managing a NetBackup appliance from the NetBackup Appliance Web Console
- About the Manage views
- About storage configuration
- Manage > Storage
- Manage > Storage > Shares
- About Universal shares migration
- Checking partition details
- Resizing a partition
- Resize dialog
- Troubleshooting resize-related issues
- Moving a partition
- Move dialog
- Moving the MSDP partition from a base disk to an expansion disk for optimum performance
- Scanning storage devices from the NetBackup Appliance Web Console
- Adding the storage space from a newly available disk
- Removing an existing storage disk
- Monitoring the progress of storage manipulation tasks
- Scanning storage devices using the NetBackup Appliance Shell Menu
- About Copilot functionality and Share management
- About viewing storage space information using the Show command
- About storage email alerts
- About appliance supported tape devices
- About configuring Host parameters for your appliance
- Manage > Appliance Restore
- Manage > License
- About the Migration Utility
- Software release updates for NetBackup Appliances
- About installing EEBs
- About installing NetBackup Administration Console and client software
- Manage > Additional Servers
- Manage > File Manager
- Manage > High Availability
- Managing NetBackup appliance using the NetBackup Appliance Shell Menu
- Expanding the bandwidth on the NetBackup appliance
- About configuring the maximum transmission unit size
- About OpenStorage plugin installation
- About mounting a remote NFS
- About running NetBackup commands from the appliance
- About NetBackup administrator capabilities
- Running NetBackup commands from the NetBackup appliance
- Creating a NetBackup touch file from the NetBackup appliance
- About NetBackup operating system commands
- Best practices for running NetBackup commands from the NetBackup appliance
- Known limitations of running NetBackup commands from the NetBackup appliance
- Creating NetBackup administrator user accounts
- Deleting NetBackup administrator user accounts
- Viewing NetBackup administrator user accounts
- About NetBackup administrator capabilities
- About Auto Image Replication between appliances
- About forwarding logs to an external server
- About high availability configuration
- About data erasure
- Understanding the NetBackup appliance settings
- About modifying the appliance settings
- Settings > Notifications
- Settings > Network
- Settings > Date and Time
- Settings > Authentication
- About configuring user authentication
- About authorizing NetBackup appliance users
- Settings > Authentication
- Settings > Authentication > LDAP
- Adding an LDAP server configuration
- Importing an LDAP server configuration
- Setting the SSL certification
- Exporting an LDAP configuration
- Unconfiguring LDAP user authentication
- Enabling the LDAP server configuration
- Disabling the LDAP server configuration
- Deleting LDAP configuration parameters
- Adding LDAP configuration parameters
- Adding an LDAP attribute mapping
- Deleting an LDAP attribute mapping
- Settings > Authentication > Active Directory
- Settings > Authentication > User Management
- Settings > Password Management
- Troubleshooting
- Deduplication pool catalog backup and recovery
- Index
NetBackup appliance user role privileges
User roles determine the access privileges that a user is granted to operate the system or to change the system configuration. The user roles that are described in this topic are specific to LDAP and Active Directory (AD) users.
The following describes the appliance user roles and their associated privileges:
Table: User roles and privileges
User role | Privileges |
|---|---|
NetBackupCLI | Users can only access the NetBackup CLI. |
Administrator | Users can access the following:
|
AMSadmin | A user account that is assigned the AMSadmin role is provided administrative privileges to access the Appliance Management Console that is hosted on the AMS. An AMS user is allowed to perform all the functions on the Appliance Management Console and centrally manage multiple appliances. The AMS user cannot log on the NetBackup Appliance Shell Menu for AMS. An Administrator can create AMS users. |
A role can be applied to an individual user, or it can be applied to a group that includes multiple users.
A user cannot be granted privileges to both user roles. However, a NetBackupCLI user can also be granted access to the NetBackup Appliance Shell Menu in the following scenarios:
The user with the NetBackupCLI role is also in a group that is assigned the Administrator role.
The user with the Administrator role is also in a group that is assigned the NetBackupCLI role.
Note:
When granting a user to have privileges to the NetBackupCLI and the NetBackup Appliance Shell Menu, an extra step is required. The user must enter the switch2admin command from the NetBackup CLI to access the NetBackup Appliance Shell Menu.
Granting privileges to users and user groups can be done as follows:
From the NetBackup Appliance Web Console, on the page, click on the Grant Permissions link.
From the NetBackup Appliance Shell Menu, use the following commands in the Settings > Security > Authorization view:
Grant Administrator Group
Grant Administrator Users
Grant Administrator SSO_Groups
Grant Administrator SSO_Users
Grant NetBackupCLI Group
Grant NetBackupCLI Users
Grant AMS Group
Grant AMS Users
Grant AMS SSO_Groups
Grant AMS SSO_Users