Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Web UI Administrator's Guide
  3. Section XIII. Disaster recovery and troubleshooting
  4. Managing Bare Metal Restore (BMR)
  5. Add a custom role for a Bare Metal Restore (BMR) administrator
NetBackup™ Web UI Administrator's Guide

Add a custom role for a Bare Metal Restore (BMR) administrator

To add a custom RBAC role

  1. On the left, select Security > RBAC and click Add.
  2. Select Custom role to manually configure all the permissions for the role.
  3. Provide a Role name and a description.

    For example, you may want to indicate that the role is for any users that are BMR administrators.

  4. On the Global tab, expand the BMR section and select all the permissions for BMR.

    Boot servers

    View, Delete

    Clients

    View, Create, Update, Delete, Pre restore

    VM conversion

    View, Delete, VM conversion

  5. Expand the NetBackup management section.
    • Locate the NetBackup hosts group.

    • Select the following permissions:

      NetBackup hosts

      View, Update

    • Locate the NetBackup backup images group.

    • Select the following permissions:

      NetBackup backup images

      Image Requests > View

      NetBackup backup images

      View

  6. For ESXi servers, additional permissions are needed for Host properties.
    • On the Global tab, expand the NetBackup management section.

    • Select the following permissions:

      Access hosts

      View, Create, Update, Delete

  7. On the Assets tab, select the following permissions.

    VMware assets

    View, Update, View restore targets

  8. Click Assign.
  9. Under Workloads, click Assign.

    Select the VMware assets that you want the role to have access to.

    • To give the role access to all VMware assets and future assets that you add, select Apply selected permissions to all existing and future VMware assets.

    • To select individual assets, deselect Apply selected permissions to all existing and future VMware assets and click Add.

      For example, you can select one or more: datastores, datastore clusters, ESXi servers, ESXi clusters, resource pools, vApps.

  10. When you have added all the assets, click Assign.
  11. On the Users card, click Assign. Then add each user that you want to have access to this custom role.
  12. When you are done configuring the role, click Save.

Feedback

Was this page helpful?
Previous

About Bare Metal Restore (BMR)

Next

Troubleshooting the NetBackup Web UI

Feedback

Was this page helpful?