NetBackup™ for OpenStack Administrator's Guide

Configuring the NBOSVM service principal

1. Create a non-root user in the NetBackup primary server.

   adduser <username>

2. Log in to the NetBackup primary server web UI.
3. From the left side menu, go to Security > RBAC > Default Security Administrator.
4. On the Users tab, add the non-root user that you have created.
5. Go to Security > Access keys.
6. Click Add and enter the non-root user to create the access token.
7. Add the generated access token and NetBackupHostName in the cURL command and run it on the NetBackup primary server.

   curl --insecure --location --request POST  \
     'https://<NetBackupHostName>:1556/netbackup/security/service-principal-configs' \
     -H 'accept: application/vnd.netbackup+json;version=11.0' \
     -H 'Content-Type: application/vnd.netbackup+json;version=11.0' \
     -H 'Authorization: <Access Token>' \
     -d '{
     "data": {
       "type": "servicePrincipalConfiguration",
       "attributes": {
         "servicePrincipalId": "Service_Principal_NBOSVM",
         "servicePrincipalType": "OPENSTACK",
         "servicePrincipalApiKeyExpireAfterDays": "P365D",
         "isSecurityAdmin": true,
         "accessDefinitions": [
             
           {
             "namespace": "|SECURITY|USERS|API-KEYS|",
             "operations": [
    
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|SECURITY|SERVICE-PRINCIPAL|",
             "operations": [
    
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|ASSETS|OPENSTACK|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|VIEW|",
                "|OPERATIONS|UPDATE|",
               "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ORIGINAL|",
               "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ALTERNATE|",
               "|OPERATIONS|ASSETS|OPENSTACK|PROTECT|"
             ]
           },
           {
             "namespace": "|PROTECTION|PROTECTION_PLAN|",
             "operations": [
               "|OPERATIONS|VIEW|",
               "|OPERATIONS|PROTECTION|PROTECTION_PLAN|SUBSCRIBE|"
             ]
           },
           {
             "namespace": "|PROTECTION|POLICIES|",
             "operations": [
               "|OPERATIONS|PROTECTION|POLICIES|MANUAL-BACKUP|",
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|CREDENTIALS|",
             "operations": [
    
               "|OPERATIONS|ADD|",
               "|OPERATIONS|UPDATE|",
               "|OPERATIONS|DELETE|"
             ]
           },
           {
             "namespace": "|MANAGE|NBOSVM-SERVER|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|UPDATE|",
                "|OPERATIONS|DELETE|"
             ]
           },
           {
             "namespace": "|MANAGE|JOBS|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|STORAGE|STORAGE-SERVERS|",
             "operations": [
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|STORAGE|STORAGE-SERVERS|UNIVERSAL-SHARES|",
             "operations": [
               "|OPERATIONS|VIEW|"
             ]
           },
           {
              "namespace": "|MANAGE|IMAGES|",
              "operations": [
                "|OPERATIONS|VIEW|"
             ]
           }
         ]
       }
     }
   }'

   Note:

   Keep a note of servicePrincipalId and apiKey from the response of the cURL. They are required in the NetBackup for OpenStack configuration.