搜索 <book_title>...

NetBackup™ for Cloud Object Store 管理指南

Last Published: 2025-04-24

Product(s): NetBackup & Alta Data Protection (11.0)

Azure blob 存储所需的权限

以下是发现、备份、还原 Microsoft Azure 对象存储以及对其进行身份验证所需的自定义角色定义（JSON 格式）。必须将自定义角色与这些权限相关联，NetBackup 用户可以使用这些权限来处理 Azure blob。要使用服务主体或托管标识身份验证，您需要具有以下权限的角色。

{
    "properties": {
        "roleName": "cosp_minimal",
        "description": "minimal permission required for cos protection.",
        "assignableScopes": [
            "/subscriptions/<Subsfription_ID>"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Storage/storageAccounts/blobServices/read",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/read",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/write",
                    "Microsoft.ApiManagement/service/*",
                    "Microsoft.Authorization/*/read",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                   "Microsoft.Storage/storageAccounts/read"

                ],
                "notActions": [],
                "dataActions": [
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/filter/action",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
																				"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action",
                ],
                "notDataActions": []
            }
        ]
    }
}