Authentication options for SQL Server credentials

The following authentication options are available to register SQL Server instances. The NetBackup web UI supports Windows authentication and Windows Active Directory authentication. It does not support Mixed Mode or SQL Server authentication.

Table: Authentication options for SQL Server credentials

Option to register credentials	Environment and configuration
Use these specific credentials (recommended)	The SQL Server DBA provides the NetBackup administrator with the SQL Server user credentials. The SQL Server DBA does not want the NetBackup services running as a privileged SQL Server user on the client. Configuration requirements The user account that is used to register credentials must have the SQL Server "sysadmin" role and be a member of the Windows Administrators group. The NetBackup services can use the Local System logon account. If you want to use a different logon account, that account must also have certain local security privileges. See Configure the NetBackup services for SQL Server backups and restores. See Configure local security privileges for SQL Server.
Use credentials that are defined locally on the client	The NetBackup services run as a privileged SQL Server user on the client. The SQL Server DBA does not want to provide credentials to register instances. The NetBackup administrator does not have access to the SQL Server credentials. You want to use gMSA credentials. Configuration requirements The user account that is used to register credentials must have the SQL Server "sysadmin" role and be a member of the Windows Administrators group. You must also configure the logon account for the NetBackup Client Service and the NetBackup Legacy Network service. See Configure the NetBackup services for SQL Server backups and restores.

Option to register credentials

Environment and configuration

Use these specific credentials (recommended)

The SQL Server DBA provides the NetBackup administrator with the SQL Server user credentials.
The SQL Server DBA does not want the NetBackup services running as a privileged SQL Server user on the client.

Configuration requirements

The user account that is used to register credentials must have the SQL Server "sysadmin" role and be a member of the Windows Administrators group.

The NetBackup services can use the Local System logon account. If you want to use a different logon account, that account must also have certain local security privileges.

See Configure the NetBackup services for SQL Server backups and restores.

See Configure local security privileges for SQL Server.

Use credentials that are defined locally on the client

The NetBackup services run as a privileged SQL Server user on the client.
The SQL Server DBA does not want to provide credentials to register instances.
The NetBackup administrator does not have access to the SQL Server credentials.
You want to use gMSA credentials.

Configuration requirements

The user account that is used to register credentials must have the SQL Server "sysadmin" role and be a member of the Windows Administrators group.

You must also configure the logon account for the NetBackup Client Service and the NetBackup Legacy Network service.

See Configure the NetBackup services for SQL Server backups and restores.

Authentication options for SQL Server credentials

Feedback

Feedback