Disable command-line (CLI) access for operating system (OS) administrators
By default, an OS administrator (user or group member) has access to the NetBackup CLI and does not need to be a member of an RBAC role.
This option prevents OS administrators from accidentally running NetBackup CLIs. A malicious user with the OS administrator access of the primary server can still bypass this restriction.
After you can disable the option, the OS administrator must log in with bpnbat -login to access the CLI.
To disable CLI access for OS administrators
- Sign in to the web UI.
- On the top right, click Settings > Global security.
- On the Security controls tab, turn off the CLI access for Operating System Administrator option.