NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Section I. Managing security
- Monitoring and notifications
- Managing role-based access control
- About role-based access control (RBAC) in NetBackup
- Configuring RBAC
- Role permissions
- Global > NetBackup management
- Access hosts
- Email notifications
- Data classification
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote master server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted master servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Global > Storage
- Assets
- Protection plans
- Credentials
- Global > NetBackup management
- Manage access
- Configure an external certificate for the NetBackup web server
- Security events and audit logs
- Managing security certificates
- Managing user sessions
- Managing master server security settings
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted master servers
- Creating and using API keys
- Configuring authentication options
- Managing hosts
- Troubleshooting the web UI
- Section II. Managing storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud (Cloud Catalyst), OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup Web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Managing protection plans
- Managing protection plans for Microsoft SQL Server
- Usage reporting and capacity licensing
- Configuring storage
- Section III. Veritas Resiliency Platform
- Section IV. Managing credentials
Add an RBAC role
An RBAC role defines the permissions that a NetBackup user has and the access that the user has to workload assets, protection plans, or credentials.
Note:
You can only use the web UI to configure access to workloads, protection plans, and credentials when you create a role. After the role is created you must recreate the role or add an additional role that has the necessary permissions. Or, you can use the NetBackup APIs to update a role.
xref to sample roles/best practices
To add an RBAC role
- On the left, select Security > RBAC and click Add.
- Provide a Role name and a description.
For example, you may want to indicate that role is for any users that are backup administrators for a particular department or region.
- On the Select permissions card, click Assign.
See Role permissions.
The permissions that you select determine the other settings that you can configure for a role.
The Select workloads card is enabled when you select Asset permissions.
The Select protection plans card is enabled when you select Protection plans permissions.
The Credentials card is enabled when you select Credentials permissions.
View or manage NetBackup permissions for hosts, images, jobs, and specific NetBackup configuration settings.
Global tab, NetBackup management
View or manage NetBackup permissions for policies and storage lifecycle policies (SLPs).
Global tab, Protection
View or manage NetBackup permissions for NetBackup security settings, including access control, certificate management, authentication, and encryption.
Global tab, Security
View or manage NetBackup permissions for storage.
Global tab, Storage
View or manage workloads
Assets tab
On the Select workloads card,
View or manage protection plans
Protection plans tab
On the Select protection plans card,
View or manage credentials
Credentials tab
On the Select credentials card,
- On the Select users card, click Assign.
- When you are done configuring the role, click Save.