Backup Exec 25 Administrator's Guide

To configure role-based access settings

1. Click the Backup Exec button, select Configuration and Settings, and then select Role-Based Access Settings.

   The role-based access control feature is disabled by default.

2. Click Enable and enter the Owner of System Logon Account credentials to enable the feature.

   In a CASO environment, ensure that the MBES servers are upgraded to the current version. If any MBES servers are of an earlier version, the list is displayed. It is recommended that you first upgrade all the MBES servers and then enable RBAC in CASO environment

   After the credentials are verified, the Owner of System Logon Account has the administrator role. The role cannot be modified or removed.

   To disable role-based access control, click Disable, enter the Owner of System Logon Account credentials and then click OK.

3. Do any of the following:

   • Click Add to add a new user in the role-based access control list.

     The user is displayed in the Role-Based Access dialog box along with the roles assigned to each user.

   • Select a user and click Edit to update the roles.

   • Select a user and click Remove to delete the user from the role-based access control list.

   • Select a user and click Details to view additional information about the user and then click OK.

   • Click Synchronize to synchronize a CAS domain user with all the MBES servers. You can select the user and then click OK.

   • Select a user to view the roles that are assigned.

     Use the Roles section to update the roles.

     For more information about the roles and their details, refer to the following section:

     See RBAC role details.

To add a new user in the role-based access control list

1. On the Role-Based Access dialog box, click Add.
2. On the Add New User dialog box, enter the name of a new user account to be added to the role-based access control list.
3. Click Verify to authenticate the user.

   Note:

   The user that you add must be part of the domain or local Windows administrator group.

4. Select the Connect to the target domain or machine check box if the new user account for role-based access cannot be verified or if the user is part of a different domain or computer.
5. Enter the administrator credentials to connect to the target domain or computer and retrieve the user account details.
6. Click Verify to authenticate the user.

   After the verification is completed, Windows Group displays the group that the user is part of.

7. Select the roles that you want to assign to the user.

   You can also assign multiple roles to the same user.

   The following roles can be assigned to a user:

   • Administrator

   • Storage Administrator

   • Backup Administrator

   • Restore Administrator

   • View Only

   For more information about the roles and their details, refer to the following section:

   See RBAC role details.

8. Click Add.

   The user is added and displayed in the Role-Based Access dialog box.

To edit a role in the role-based access control list

1. On the Role-Based Access dialog box, select a user and click Edit.
2. In the Roles section, select or remove any roles.
3. Click Save.

   The roles for a user are updated.

To synchronize a CAS user to the MBES servers

1. On the Role-Based Access dialog box, click Synchronize to synchronize a CAS user to the MBES servers.

   Note:

   You can only synchronize a domain user to the MBES servers.

2. In the User Account Synchronization Manager dialog box, select the users that you want to synchronize across the MBES servers.
3. Click OK.

   On the Role-Based Access dialog box, the Synchronization column displays the Enabled status.

   To remove the synchronization for a user, click Synchronize, clear the selected check box of the user, and then click OK. The synchronization is removed from both CAS and MBES.

   Note:

   Any domain user that is synced on the CAS server cannot be edited or removed from the MBES servers.