NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring and notifications
- Section I. Configuring hosts
- Section II. Configuring storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud storage, OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Create a Media Server Deduplication Pool (MSDP) storage server for image sharing
- Managing protection plans
- Managing classic policies
- Managing backup images
- Configuring storage
- Section III. Managing credentials
- Managing credentials for workloads and systems that NetBackup accesses
- About credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Managing credentials for workloads and systems that NetBackup accesses
- Section IV. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted primary servers
- Access keys
- Configuring authentication options
- Section V. Managing role-based access control
- About role-based access control in NetBackup
- Configuring RBAC roles
- Configuring RBAC
- Notes for using NetBackup RBAC
- Add AD or LDAP domains
- Add a custom RBAC role
- Edit or remove a role a custom role
- View users in RBAC
- Add a user to a role (non-SAML)
- Add a user to a role (non-SAML, smart card user without AD or LDAP domain association or mapping)
- Add a user to a role (SAML)
- Remove a user from a role
- Default RBAC roles
- Administrator
- Default AHV Administrator
- Default Cloud Administrator
- Default NetBackup Command Line (CLI) Administrator
- Default Kubernetes Administrator
- Default NetBackup Kubernetes Operator Service
- Default Microsoft SQL Server Administrator
- Default Oracle Administrator
- Default RHV Administrator
- Default SaaS Administrator
- Default Resiliency Administrator
- Default Security Administrator
- Default Storage Administrator
- Default Universal Share Administrator
- Default VMware Administrator
- Configuring RBAC
- RBAC permissions
- About role permissions
- Global > BMR
- Global > NetBackup Web Management Console Administration
- Global > NetBackup management
- Access hosts
- Agentless hosts
- Anomalies
- CLI sessions
- Data classifications
- Email notifications
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote primary server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted primary servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Access control
- Security events
- Certificate management
- Disaster recovery passphrase
- Identity provider and SAML certificate configuration
- Key Management Services (KMS)
- Passphrase constraints
- Service principal configuration
- Global security settings
- Trust versions
- API keys
- User certificates
- User sessions and authentication
- Global > Storage
- Assets
- Protection plans
- Credentials
- Manage access
- Section VI. Managing detection and reporting
- Managing deployment
- Managing Resiliency Platforms
- NetBackup SaaS Protection
- NetBackup Flex Scale
- Managing Bare Metal Restore (BMR)
- Troubleshooting the NetBackup Web UI
Kubernetes assets
Permissions for Kubernetes assets allow users to view, protect, and restore Kubernetes assets. The permissions for the Default Kubernetes Administrator role give a user the ability to view and manage jobs for Kubernetes assets.
Note the following for jobs permissions:
You can give one or more job permissions to specific Kubernetes assets group:
Kubernetes Cluster and Namespaces: You can give permissions exclusively to the Kubernetes cluster and namespaces.
Kubernetes asset group: You can give permissions exclusively to the Kubernetes intelligent groups.
Table: Permissions for Kubernetes Cluster and Namespaces
Operation | Description | Additional required operations |
|---|---|---|
View | View Kubernetes clusters and namespaces. | |
Create | Add Kubernetes clusters. Validate credentials. | View Credentials > Credentials management > View Credentials > Credentials management > Assign credentials |
Update | Update Kubernetes clusters and their credentials. Validate credentials. | View Credentials > Credentials management > View Credentials > Credentials management > Assign credentials |
Delete | Delete Kubernetes clusters. | View |
Manage access | See Manage access. | View |
Discover | Discover the Kubernetes assets. | View |
Protect | Add Kubernetes assets to or remove them from protection plans. | View |
Restore | Restore to the original or to an alternate location. An alternate location restore for Kubernetes means a restore to the namespace from the backup image to another namespace within the same cluster or a different cluster. | View NetBackup management > NetBackup backup images > View |
View restore targets | View the available destinations where you can restore an asset. | View |
Cancel jobs | Cancel a job for a Kubernetes asset. | View jobs |
Restart jobs | Restart any job for a Kubernetes asset. | View jobs |
View jobs | View any job for a Kubernetes asset. |
Table: Permissions for Kubernetes asset group
Operation | Description | Additional required operations |
|---|---|---|
View | View Kubernetes intelligent groups. | |
Create | Add Kubernetes intelligent groups. Validate credentials. | View Credentials > Credentials management > View Credentials > Credentials management > Assign credentials |
Update | Update Kubernetes intelligent groups and their credentials. Validate credentials. | View Credentials > Credentials management > View Credentials > Credentials management > Assign credentials |
Delete | Delete Kubernetes intelligent groups. | View |
Manage access | See Manage access. | View |
Protect | Add Kubernetes intelligent groups to or remove them from protection plans. | View |