NBAC on primary, media server, and graphical user interface security
The NBAC on primary server, media server, and graphical user interface security method uses the authentication broker. The broker provides credentials to the primary server, the media server, and the graphical user interface. This datacenter example uses the NetBackup Access Control on the primary and the media servers to limit access to portions of NetBackup. Non-root administration of NetBackup can also be done using this example. NBAC is configured for use between the servers and the graphical user interfaces. Non-root users can log on to NetBackup using the operating system. Use the UNIX password or the Windows local domain to administer NetBackup. The global user repositories (NIS/NIS+ or Active Directory) can also be used to administer NetBackup. In addition, NBAC can be used to limit the level of access to NetBackup for certain individuals. For example, you can segregate day to day operational control from environmental configuration such as adding new policies, robots, etc.
The following figure shows an example NBAC on primary and media server configuration.