Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Increasing NetBackup security
  4. NBAC on primary, media server, and graphical user interface security
NetBackup™ Security and Encryption Guide

NBAC on primary, media server, and graphical user interface security

The NBAC on primary server, media server, and graphical user interface security method uses the authentication broker. The broker provides credentials to the primary server, the media server, and the graphical user interface. This datacenter example uses the NetBackup Access Control on the primary and the media servers to limit access to portions of NetBackup. Non-root administration of NetBackup can also be done using this example. NBAC is configured for use between the servers and the graphical user interfaces. Non-root users can log on to NetBackup using the operating system. Use the UNIX password or the Windows local domain to administer NetBackup. The global user repositories (NIS/NIS+ or Active Directory) can also be used to administer NetBackup. In addition, NBAC can be used to limit the level of access to NetBackup for certain individuals. For example, you can segregate day to day operational control from environmental configuration such as adding new policies, robots, etc.

The following figure shows an example NBAC on primary and media server configuration.

Figure: NBAC on primary and media server

NBAC on primary and media server

Feedback

Was this page helpful?
Previous

Client side encryption security

Next

NBAC complete security

Feedback

Was this page helpful?