NetBackup™ Web UI Cloud Administrator's Guide

To add a cloud provider for Snapshot Manager

1. On the left, click Workloads > Cloud.
2. Click the Providers tab or click Add under the cloud provider for which you want to add a configuration.
3. Enter a value in the Configuration Name field in the Add configuration pane.
4. Select the preferred Snapshot Manager.
5. Enter the required details.

   Cloud provider	Parameter	Description
   Microsoft Azure	Credential type: Application service principal
   	Tenant ID	The ID of the AAD directory in which you created the application.
   	Client ID	The application ID.
   	Secret key	The secret key of the application.
   	Credential type: System managed identity	Enable system-managed identity on Snapshot Manager host in Azure. Note: Assign a role to the system-managed identity.
   	Credential type: User managed identity
   	Client ID	The ID of the user-managed identity connected to the Snapshot Manager host. Note: The user-managed identity must have a role assigned.
   	The following parameters are applicable for all the above credential types
   	Regions	One or more regions in which to discover cloud assets. Note: If you configure a government cloud, select US Gov Arizona, US Gov Texas or US Gov Virginia.
   	Resource Group prefix	The string with which you want to append all the resources in a resource group.
   	Protect assets even if prefixed Resource Groups are not found	The check box determines whether the assets are protected if they are not associated with any resource groups.
   Microsoft Azure Stack Hub	Using AAD: Azure Stack Hub Resource Manager endpoint URL	The endpoint URL in the following format allows Snapshot Manager to connect with your Azure resources. https://management.<location>.<FQDN>
   	Tenant ID	The ID of the AAD directory in which you created the application.
   	Client ID	The application ID.
   	Secret Key	The secret key of the application.
   	Authentication Resource URL (optional)	The URL where the authentication token is sent to.
   	Using ADFS: Azure Stack Hub Resource Manager endpoint URL	The endpoint URL in the following format that allows Snapshot Manager to connect with your Azure resources. https://management.<location>.<FQDN>
   	Tenant ID	The ID of the AAD directory in which you created the application.
   	Client ID	The application ID.
   	Secret Key	The secret key of the application.
   	Authentication Resource URL (optional)	The URL where the authentication token is sent to.
   Amazon AWS	Access Key	The access key ID, when specified with the secret access key, authorizes Snapshot Manager to interact with the AWS APIs. Note: For more information on how to create an IAM role, see the AWS documentation.
   	Secret Key	The secret key of the application.
   	Note: If the Snapshot Manager is configured with IAM Config, the Access Key and Secret Key options are not available.
   	Regions	One or more AWS regions in which to discover cloud assets. Note: If you configure a government cloud, select us-gov-east-1 or us-gov-west-1.
   	VPC Endpoint	First DNS name of AWS Security Token Service (STS) endpoint service with no zone specified.
   Google Cloud Platform	Project ID	The ID of the project from which the resources are managed. Listed as in the project_id JSON file.
   	Client Email	The email address of the Client ID. Listed as client_email in the JSON file.
   	Private Key	The private key. Listed as private_key in the JSON file. Note: You must enter this key without quotes. Do not enter any spaces or return characters at the beginning or end of the key.
   	Regions	A list of regions in which the provider operates.
   Oracle Cloud Infrastructure	Credential type: API Key
   	User OCID	User's OCID for which you generate the credentials.
   	Tenancy	Tenant ID of the OCI account.
   	Fingerprint	The fingerprint that you obtain while generating the credential.
   	Private Key	The private key that you obtain while generating the credential.
   	Regions	One or more OCI regions in which you want to discover the cloud assets.
   	Credential type: IAM	NetBackup Snapshot Manager must be a part of a dynamic group and that dynamic group must have enough permissions. Note: If the Snapshot Manager is configured with IAM Configuration, the other fields, except Regions, are not available.

6. Enter the connection and authentication details in the Add Configuration pane.
7. Click Save.