Search <book_title>...

Veritas NetBackup™ Appliance Administrator's Guide

Last Published: 2019-03-13

Product(s): Appliances (3.1.1)

Platform: 5220,5230,5240,5330,5340

About authorizing NetBackup appliance users

Table: User authorization management describes the options that are provided for authorizing new and existing users or user groups through the NetBackup Appliance Web Console and NetBackup Appliance Shell Menu:

Table: User authorization management

Task	NetBackup Appliance Web Console	NetBackup Appliance Shell Menu
Manage users	The following options are available under Settings > Authentication > User Management View all of the users that have been added to the appliance. Expand and view all belonging users to a single user group. Add and delete local users. Add and delete LDAP/AD/Kerberos-NIS users and user groups.	Use the Settings > Security > Authentication commands to add, delete, and view appliance users. See About configuring user authentication.
Manage user permissions (roles)	The following options are available under Settings > Authentication > User Management: Grant and revoke the Administrator role for users and user groups. Grant and revoke the NetBackupCLI role for users and user groups. Synchronize members of registered user groups with Administrator role.	The following commands and options are available under Main > Settings > Security > Authorization: Grant Grant the Administrator and NetBackupCLI roles to specific users and users groups that have been added to the appliance. List List all of the users and user groups that have been added to the appliance, along with their designated roles. Revoke Revoke the Administrator and NetBackupCLI roles from specific users and users groups that have been added to the appliance. SyncGroupMembers Synchronize members of registered user groups.

Task

NetBackup Appliance Web Console

NetBackup Appliance Shell Menu

Manage users

The following options are available under Settings > Authentication > User Management

View all of the users that have been added to the appliance.
Expand and view all belonging users to a single user group.
Add and delete local users.
Add and delete LDAP/AD/Kerberos-NIS users and user groups.

Use the Settings > Security > Authentication commands to add, delete, and view appliance users.

See About configuring user authentication.

Manage user permissions (roles)

The following options are available under Settings > Authentication > User Management:

Grant and revoke the Administrator role for users and user groups.
Grant and revoke the NetBackupCLI role for users and user groups.
Synchronize members of registered user groups with Administrator role.

The following commands and options are available under Main > Settings > Security > Authorization:

Grant
Grant the Administrator and NetBackupCLI roles to specific users and users groups that have been added to the appliance.
List
List all of the users and user groups that have been added to the appliance, along with their designated roles.
Revoke
Revoke the Administrator and NetBackupCLI roles from specific users and users groups that have been added to the appliance.
SyncGroupMembers
Synchronize members of registered user groups.

Notes about user management

You cannot grant the NetBackupCLI role to an existing local user. However, you can create a local NetBackupCLI user by using the Manage > NetBackupCLI > Create command from theNetBackup Appliance Shell Menu.
The NetBackupCLI role can be assigned to a maximum of nine user groups at any given time.
Active Directory (AD) user groups and user names support the use of a hyphen character in those names. The hyphen must appear between the first and the last character of a user name or a user group name. AD user names and user group names cannot begin or end with a hyphen.
You can list all users of a group that has maximum to 2000 users from theNetBackup Appliance Web Console. To list all of a group that has more than 2000 users, use the List command from theNetBackup Appliance Shell Menu.