To add a custom RBAC role

1. On the left, select Security > RBAC and click Add.
2. Select Custom role to manually configure all the permissions for the role.
3. Provide a Role name and a description.

   For example, you may want to indicate that role is for any users that are BMR administrators.

4. On the Permissions card, click Assign.
5. On the Global tab, expand the BMR section and select all the permissions for BMR.

   Boot servers	View, Delete
   Clients	View, Create, Delete, Pre-restore
   VM conversion	View, Delete, VM conversion

6. On the Global tab, expand the NetBackup management section.

   • Locate the NetBackup backup images group.

   • Select the following permissions:

     NetBackup backup images

     View

7. For ESXi servers, additional permissions are needed from Host properties.

   • On the Global tab, expand the NetBackup management section.

   • Select the following permissions:

     Access hosts

     View, Create, Delete

8. On the Assets tab, select the following permissions.

   VMware assets

   View, Update, View restore targets

9. Click Assign.
10. On the Workloads card, click Assign.

    Select the VMware assets that you want the role to have access to.

    • To give the role access to all VMware assets and future assets that you add, select Apply selected permissions to all existing and future VMware assets.

    • To select individual assets, deselect Apply selected permissions to all existing and future VMware assets and click Add.

      For example, you can select one or more: datastores, datastore clusters, ESXi servers, ESXi clusters, resource pools, vApps.

11. When you have added all the assets, click Assign.
12. On the Users card, click Assign. Then add each user that you want to have access to this custom role.
13. When you are done configuring the role, click Save.