Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section I. Identity and access management
  4. Role-based access control
  5. Configuring RBAC
NetBackup™ Security and Encryption Guide

Configuring RBAC

To configure role-based access control for the NetBackup web UI, perform the following steps.

Table: Steps to configure role-based access control

Step

Action

Description

1

Configure any Active Directory or LDAP domains.

Before you can add domain users, Active Directory or LDAP domains must be authenticated with NetBackup.

See the NetBackup Security & Encryption Guide.

2

Determine the permissions that your users need.

Determine the permissions that your users need to perform their daily tasks.

You can use the default RBAC roles or use a default role as a template to create a new role. Or, you can create a completely custom role to fit your needs.

See Default RBAC roles.

See Add a custom RBAC role.

3

Add users to the appropriate roles.

See Add a user to a role (non-SAML).

See Add a user to a role (SAML).

See Add a smart card user to a role (non-SAML, without AD/LDAP).

4

Determine the permissions that you want for OS administrators

See Disable web UI access for operating system (OS) administrators.

See Disable command-line (CLI) access for operating system (OS) administrators.

Feedback

Was this page helpful?
Previous

Disable command-line (CLI) access for operating system (OS) administrators

Next

Add AD or LDAP domains

Feedback

Was this page helpful?