Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service
  5. Installing KMS
  6. Using KMS with NBAC
NetBackup™ Security and Encryption Guide

Using KMS with NBAC

The following changes have been made to NBAC to support the introduction of KMS:

  • Addition of the new authorization object KMS

  • Addition of the new NetBackup user group NBU_KMS Admin

The permissions a user has on the KMS object determines the KMS-related tasks you are allowed to perform.

Table: Default KMS permissions for NetBackup user groups shows the default KMS permissions for each of the NetBackup user groups.

Table: Default KMS permissions for NetBackup user groups

Set

Activity

NBU_ User

NBU_ Operator

NBU_ Admin

NBU_ Security Admin

Vault_ Operator

NBU_ SAN Admin

NBU_ KMS Admin

Browse

Browse

---

---

X

---

---

---

X

Read

Read

---

---

X

---

---

---

X

Configure

New

---

---

---

---

---

---

X

Configure

Delete

---

---

---

---

---

---

X

Configure

Modify

---

---

---

---

---

---

X

Besides the KMS permissions listed above, the NBU_KMS admin group also has the following permissions on other authorization objects:

  • BUAndRest has Browse, Read, Backup, Restore, List

  • HostProperties has Browse, Read

  • License has Browse, Read

Feedback

Was this page helpful?
Previous

Installing KMS

Next

About installing KMS with HA clustering

Feedback

Was this page helpful?