Netbackup API fails during restore of virtual machines when initiated from VRP

Netbackup API fails during restore of virtual machines when initiated from VRP

Article: 100046949
Last Published: 2020-04-28
Ratings: 0 0
Product(s): Resiliency Platform & CloudMobility

Problem

The restore operation of virtual machines configured in VRP fails due to required privileges not provided to Netbackup user that VRP is using.

Error Message

9908 User is not authorizes to perform Recovery operation

Cause

The privileges needed to perform this operations are either missing or there may be some environmental issue.

Solution

Following permissions are needed for the custom user to perform all Netbackup operations from VRP.

NBU Privilege

Description

View Recovery Points

Required to discover backup images

Recover/Restore

Required to restore virtual machine from backup image

Instant Access

Required to restore the NBU backed up VM using NBU Instant Access

Download Files

Required for Restoring vmdk files on Datastore

Restore Files

Required for Restoring files inside VM on the VM’s disks

Manage Hosts

Required to discover ESXs configured in NBU Master

Manage Policies

Required to discover policies

Manage SLPs

Required to discover Storage lifecycle policies

Manage Assets

Required to discover virtual machines

Manage Appservers and Asset Groups(NBU 8.2)

Or

Manage Application Servers and Asset Groups(NBU 8.1.2)

Required to discover VCenters configured in the NBU Master

Manage NetBackup

Required for following purpose

  1. To discover disk pools
  2. To checks if the host is valid
  3. Adds the IMS to the list of NetBackup WebSocket Servers
  4. Lists all the hosts that serve as NetBackup WebSocket servers

View Storage(NBU 8.2)

Required to discover Storage Units

Overwrite Asset(NBU 8.2)

Required to restore virtual machine from backup image on the original Virtual machine

View Hosts

Required to discover Master details

 

1. The script "VRPServiceRole.pl" allows user to create a role on Netbackup master which has all the required privileges for VRP to perform all operations related to DR using Netbackup.

     Refer to following link to download this utility.

    https://www.veritas.com/content/support/en_US/downloads/update.UPD981631

2. Netbackup custom user can be used to run the script. The user must have the Security administrator role assigned on Netbackup master server.

3. You can assign this role to the NBU custom user by performing following steps.

Go to the NBU GUI -> RBAC -> Access rules -> Add Access rules -> Provide the NBU custom user, Select Security administrator and all objects.

4. You can also use the same script to delete the VRPServiceRole after creating this role. Please refer to the Readme for more details.

 

References

JIRA : STESC-3874 JIRA : STESC-3854

Was this content helpful?