NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Section I. Monitoring and notifications
- Section II. Managing security
- Managing role-based access control
- First-time sign in to a NetBackup master server from the NetBackup web UI
- Authorized users
- About role-based access control (RBAC) in NetBackup
- Configuring RBAC
- Role permissions
- Global > NetBackup management
- NetBackup Web Management Console Administration
- Access hosts
- Data classification
- Email notifications
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote master server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted master servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Global > Storage
- Assets
- Protection plans
- Credentials
- Global > NetBackup management
- Manage access
- Configure an external certificate for the NetBackup web server
- Security events and audit logs
- Managing security certificates
- Managing user sessions
- Managing master server security settings
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted master servers
- Creating and managing API keys for users (Administrators)
- Adding and managing your API key (Users)
- Configuring authentication options
- Managing hosts
- Managing role-based access control
- Section III. Managing storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud (Cloud Catalyst), OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup Web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Creating a cloud recovery host for image sharing
- Managing protection plans
- Usage reporting and capacity licensing
- Configuring storage
- Section IV. Veritas Resiliency Platform
- Section V. Managing credentials
- Troubleshooting the NetBackup Web UI
Default RBAC roles
The NetBackup web UI provides several default RBAC roles with preconfigured permissions and settings.
Note:
Veritas reserves the right to update the RBAC permissions for default roles in future releases. Any revised permissions are automatically applied to users of these roles when NetBackup is upgraded. If you have copies of default roles (or any custom roles that are based on default roles), these roles are not updated automatically. If you want these custom roles to include changes to default roles, you must manually apply the changes or recreate the custom roles.
The Administrator role has full permissions for NetBackup and can manage all aspects of NetBackup, including security, storage, protection plans, policies, jobs, and credentials.
This role has all the permissions that are necessary to manage cloud assets and to back up those assets with protection plans.
Table: RBAC permissions for Default Cloud Administrator role
Type | Permissions |
|---|---|
NetBackup backup images | View Contents, View |
Jobs | View |
Media server | View |
Trusted master servers | View |
Snapshot management server plug-ins | View, Create, Update, Manage access |
Snapshot management servers | Full permissions |
Storage units | View |
Replication-capable target storage servers | View |
Cloud assets | Full permissions |
Full permissions | |
This role has all the permissions that are necessary to manage SQL Server databases and to back up those assets with protection plans. In addition to this role, the NetBackup user must meet the following requirements:
Member of the Windows administrator group.
Have the SQL Server "sysadmin" role.
Table: RBAC permissions for Default Microsoft SQL Server Administrator role
Type | Permissions |
|---|---|
Jobs | View |
Trusted master servers | View |
Storage units | View |
Replication-capable target storage servers | View |
SQL Server assets | Full permissions |
Full permissions | |
Full permissions | |
This role has all the permissions to protect Veritas Resiliency Platform (VRP) for VMware assets.
Table: RBAC permissions for Default Resiliency Administrator role
Type | Permissions |
|---|---|
Resiliency domain | Full permissions |
Full permissions | |
This role has all the permissions that are necessary to manage Red Hat Virtualization machines and to back up those assets with protection plans.
Table: RBAC permissions for Default RHV Administrator role
Type | Permissions |
|---|---|
Access hosts | View, Create, Delete |
Hosts | Update, View |
Jobs | View |
Resource limits | View, Create, Update, Delete |
Trusted master servers | View |
Storage units | View |
Replication-capable target storage servers | View |
RHV assets | Full permissions |
Full permissions | |
This role has permissions to manage NetBackup security including role-based access control (RBAC), certificates, hosts, identity providers and domains, global security settings, and other permissions. This role can also view settings and assets in most areas of NetBackup, including workloads, storage, licensing, and other areas.
Table: RBAC permissions for Default Security Administrator role
Type | Permissions |
|---|---|
Access hosts | View, Manage access |
Data classifications | View, Manage access |
Credentials | View, Manage access |
Email notifications | View, Manage access |
Event logs: Messages, Notifications | View, Manage access |
NetBackup hosts | Full permissions |
Image sharing: Amazon Machine Image (AMI) Cloud images, Cloud VM IDs | View, Manage access |
NetBackup backup images | View, Manage access |
Jobs | View, Manage access |
Licensing | View, Manage access |
Media server | Full permissions |
Remote master server certificate authority | Full permissions |
Resiliency domain | View, Manage access |
Resource limits | View, Manage access |
Retention levels | View, Manage access |
Trusted master servers | Full permissions |
Cloud providers | View, Manage access |
Cloud providers: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP) | View, Manage access |
CloudPoint servers | View, Manage access |
WebSocket servers | View, Manage access |
Policies | View, Manage access |
Storage lifecycle policies (SLPs) | View, Manage access |
Security events | View, Manage access |
Certificate management: Certificate authorities, ECA, NetBackup certificates, Tokens | Full permissions |
Disaster recovery passphrase | Full permissions |
Identity provider configuration | Full permissions |
Key Management Services | Full permissions |
Passphrase constraints | Update (Full permissions) |
Global security settings | Full permissions |
Trust versions | View, Manage access |
User sessions and authentication: API keys, User certificates, User sessions | Full permissions |
Cloud storage, Disk pools, Storage Key Management Services, Storage servers, Disk volumes, Storage units | View, Manage access |
Tape media: Tape media server groups, Tape media volume pools | View, Manage access |
Replication-capable target storage servers | View, Manage access |
Cloud, SQL Server, RHV, VMware | View, Manage access |
View, Manage access | |
View, Manage access | |
This role has permissions to configure and manages disk-based storage and cloud storage.
Table: RBAC permissions for Default Storage Administrator role
Type | Permissions |
|---|---|
Media server | View |
Remote master server certificate authority | View |
Trusted master servers | View, Create, Update, Delete |
NetBackup security tokens | View, Create |
Key Management Services | View, View key details |
Cloud storage | View |
Disk pools | View, Create, Update, Delete |
Storage servers | View, Create, Update, Delete |
Disk volumes | View, Create, Update |
Storage units | View, Create, Update, Delete |
Replication-capable target storage servers | View |
This role has all the permissions that are necessary to manage VMware virtual machines and to back up those assets with protection plans.
Table: RBAC permissions for Default VMware Administrator role
Type | Permissions |
|---|---|
Access hosts | View, Create, Delete |
Hosts | View, Update |
Host properties | View, Create, Update |
NetBackup images | View, View contents |
Jobs | View |
Resource limits | View, Create, Update, Delete |
Trusted master servers | View |
Storage units | View |
Replication-capable target storage servers | View |
VMware assets | Full permissions |
Full permissions | |