Search <book_title>...

Veritas NetBackup™ Virtual Appliance Documentation

Last Published: 2017-07-25

Product(s): Appliances (3.0)

About user authorization on the NetBackup Virtual Appliance

The NetBackup Virtual Appliance is administered and managed through user accounts. You can create local user accounts, or register users and user groups that belong to a remote directory service. In order for a new user account to log on and access the appliance, you must first authorize it with a role. By default, a new user account does not have an assigned role, and therefore it cannot log on until you grant it a role.

Table: NetBackup Virtual Appliance user roles

Role	Description
Administrator	A user account that is assigned the Administrator role is provided administrative privileges to manage the NetBackup Virtual Appliance. An Administrator user is allowed to log on, view, and perform all functions on the NetBackup Virtual Appliance Shell Menu. These user accounts have permissions to log on to the appliance and run NetBackup commands with superuser privileges. See About the Administrator user role.
NetBackupCLI	A user account that is assigned the NetBackupCLI role is solely restricted to run a limited set of NetBackup CLI commands and does not have access outside the scope of NetBackup software directories. Once these users log on to the appliance, they are taken to a restricted shell menu from where they can manage NetBackup. The NetBackupCLI users do not have access to the NetBackup Virtual Appliance Shell Menu. See About the NetBackupCLI user role.

Role

Description

Administrator

A user account that is assigned the Administrator role is provided administrative privileges to manage the NetBackup Virtual Appliance. An Administrator user is allowed to log on, view, and perform all functions on the NetBackup Virtual Appliance Shell Menu. These user accounts have permissions to log on to the appliance and run NetBackup commands with superuser privileges.

See About the Administrator user role.

NetBackupCLI

A user account that is assigned the NetBackupCLI role is solely restricted to run a limited set of NetBackup CLI commands and does not have access outside the scope of NetBackup software directories. Once these users log on to the appliance, they are taken to a restricted shell menu from where they can manage NetBackup. The NetBackupCLI users do not have access to the NetBackup Virtual Appliance Shell Menu.

See About the NetBackupCLI user role.

The following list describes some of the characteristics of NetBackup Virtual Appliance authorization:

Ability to prevent unintended access to the appliance by password protecting logins.
Access to shared data is provided only to authorized appliance users and NetBackup processes.
Data that is stored within an appliance cannot inherently protect itself from unintended modification or deletion by a malicious user that knows the admin credentials to the appliance.
Network access to the NetBackup Virtual Appliance Shell Menu is only allowed through SSH.
Access to FTP, Telnet, and rlogin are disabled on all appliances.

Note:

The NetBackup Virtual Appliance does not currently limit login attempts and enforce lockout policies. These features will be implemented in future releases.

More Information

NetBackup Virtual Appliance user role privileges

Granting roles to NetBackup Virtual Appliance users and user groups

About managing NetBackup Virtual Appliance users