NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring and notifications
- The NetBackup dashboard
- About the Activity monitor
- Job monitoring
- Workloads that require a custom RBAC role for specific job permissions
- View a job
- View the jobs in the List view
- View the jobs in the Hierarchy view
- Jobs: cancel, suspend, restart, resume, delete
- Search for or filter jobs in the jobs list
- Create a jobs filter
- Edit or delete a jobs filter
- Troubleshooting the viewing of jobs
- Job notifications
- NetBackup event notifications
- Section I. Managing hosts
- Managing host properties
- Managing credentials for workloads and systems that NetBackup accesses
- Overview of credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Managing deployment
- Section II. Configuring storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud storage, OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Create a Media Server Deduplication Pool (MSDP) storage server for image sharing
- Using image sharing from the NetBackup web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Using instant access for MS-Windows and Standard policies
- Overview of backups in the web UI
- Managing protection plans
- Managing classic policies
- Managing backup images
- Pausing data protection activity
- Configuring storage
- Section III. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- About TLS session resumption
- Set a passphrase for disaster recovery
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- RBAC features
- Authorized users
- Configuring RBAC
- Notes for using NetBackup RBAC
- Add AD or LDAP domains
- View users in RBAC
- Add a user to a role (non-SAML)
- Add a smart card user to a role (non-SAML, without AD/LDAP)
- Add a user to a role (SAML)
- Remove a user from a role
- Disable web UI access for operating system (OS) administrators
- Disable command-line (CLI) access for operating system (OS) administrators
- Default RBAC roles
- Add a custom RBAC role
- Role permissions
- Manage access permission
- View access definitions
- Section IV. Detection and reporting
- Detecting malware
- About malware detection
- Configure a new scan host pool
- Add an existing scan host
- Manage credentials
- Remove the scan host
- Deactivate the scan host
- Scan a policy client backup images for malware
- Perform malware scanning
- Scan a VMware asset for malware
- View the malware scan status
- Actions for malware scanned images
- Recover from malware-affected images (clients protected by policies)
- Recover a VMware asset affected by malware
- Troubleshooting
- Detecting anomalies
- Usage reporting and capacity licensing
- Detecting malware
- Section V. NetBackup workloads and NetBackup Flex Scale
- Section VI. Disaster recovery and troubleshooting
Configuring RBAC
To configure role-based access control for the NetBackup web UI, perform the following steps.
Table: Steps to configure role-based access control
Step | Action | Description |
|---|---|---|
1 | Configure any Active Directory or LDAP domains. | Before you can add domain users, Active Directory or LDAP domains must be authenticated with NetBackup. |
2 | Determine the permissions that your users need. | Determine the permissions that your users need to perform their daily tasks. You can use the default RBAC roles or use a default role as a template to create a new role. Or, you can create a completely custom role to fit your needs. See Role permissions. See Default RBAC roles. |
3 | Add users to the appropriate roles. | See Add a user to a role (non-SAML). See Add a user to a role (SAML). See Add a smart card user to a role (non-SAML, without AD/LDAP). |
4 | Determine the permissions that you want for OS administrators | See Disable web UI access for operating system (OS) administrators. See Disable command-line (CLI) access for operating system (OS) administrators. |