Configure multi-person authorization
The configuration of multi-person authorization for NetBackup operations is supported only from the NetBackup web UI. A user with the Administrator or the Security Administrator role can configure multi-person authorization for critical NetBackup operations.
To configure multi-person authorization for NetBackup operations
- Sign into the NetBackup web UI using the security administrator account.
- On the left, select Security > Multi-person authorization.
- At the top right, select the option Configure multi-person authorization.
- Go to Operations for multi-person authorization. Then select Edit.
- Select all or any of the following critical operations for which you want to configure multi-person authorization.
Images
Image expiry
Remove image hold
Security
Global security settings
Encryption key management
API keys
Note:
If multi-person authorization is enabled for API key operations, a ticket is generated. After the multi-person authorization ticket is approved, the user needs to execute the ticket using the Execute ticket option in the NetBackup web UI and then the required API key operation is executed.
For NetBackup releases earlier than 10.5, if multi-person authorization is enabled, you cannot perform API key operations.
Malware scan host management
Note:
Starting with NetBackup 11.0, if multi-person authorization is enabled for this operation, a ticket is generated.
Protection
Policy management
Note:
Starting with NetBackup 11.0, if multi-person authorization is enabled for this operation, a ticket is generated. If there is an existing ticket for a policy that is pending for approval, you cannot perform any operations on the same policy until the existing ticket is either approved, rejected, canceled, or expired.
MSDP WORM
WORM retention lock removal
WORM configuration change
- Select Save.
- Configure the users to be exempted from multi-person authorization.
Starting with 11.0, you can exempt users from multi-person authorization for specific operation and action for specific time frame.
- Configure email notifications that you want to send to approvers and other email recipients. You can specify additional email recipients to whom you want to send email notifications.
Click Configure to configure the SMTP server for emails.
- Go to Schedules. Then select Edit.
- Specify when you want to expire and purge the multi-person authorization tickets.
- Select Save.
- Select Configure.