To add a custom RBAC role

1. On the left, select Security > RBAC and click Add.
2. Select Custom role to manually configure all the permissions for the role.
3. Provide a Role name and a description.

   For example, you may want to indicate that the role is for any users that are BMR administrators.

4. On the Global tab, expand the BMR section and select all the permissions for BMR.

   Boot servers	View, Delete
   Clients	View, Create, Update, Delete, Pre restore
   VM conversion	View, Delete, VM conversion

5. Expand the NetBackup management section.

   • Locate the NetBackup hosts group.

   • Select the following permissions:

     NetBackup hosts

     View, Update

   • Locate the NetBackup backup images group.

   • Select the following permissions:

     NetBackup backup images		Image Requests > View
     NetBackup backup images		View

6. For ESXi servers, additional permissions are needed for Host properties.

   • On the Global tab, expand the NetBackup management section.

   • Select the following permissions:

     Access hosts

     View, Create, Update, Delete

7. On the Assets tab, select the following permissions.

   VMware assets

   View, Update, View restore targets

8. Click Assign.
9. Under Workloads, click Assign.

   Select the VMware assets that you want the role to have access to.

   • To give the role access to all VMware assets and future assets that you add, select Apply selected permissions to all existing and future VMware assets.

   • To select individual assets, deselect Apply selected permissions to all existing and future VMware assets and click Add.

     For example, you can select one or more: datastores, datastore clusters, ESXi servers, ESXi clusters, resource pools, vApps.

10. When you have added all the assets, click Assign.
11. On the Users card, click Assign. Then add each user that you want to have access to this custom role.
12. When you are done configuring the role, click Save.