Configure multiperson authorization
The configuration of multiperson authorization for NetBackup operations is supported only from the NetBackup web UI. A user with the Administrator or the Security Administrator role can configure multiperson authorization for critical NetBackup operations.
To configure multiperson authorization for NetBackup operations
- On the left, select Security > multiperson authorization.
- At the top right, select the option Configure multiperson authorization.
- Go to Operations for multiperson authorization. Then select Edit.
- Select all or any of the following critical operations for which you want to configure multiperson authorization.
Images
Image expiry
Remove image hold
Security
Global security settings
Encryption key management
API keys
Note:
If multiperson authorization is enabled for API key operations, a ticket is generated. After the multiperson authorization ticket is approved, the user needs to execute the ticket using the Execute ticket option in the NetBackup web UI and then the required API key operation is executed.
For NetBackup releases earlier than 10.5, if multiperson authorization is enabled, you cannot perform API key operations.
Malware scan host management
Note:
Starting with NetBackup 11.0, if multiperson authorization is enabled for this operation, a ticket is generated.
Protection
Policy management
Note:
Starting with NetBackup 11.0, if multiperson authorization is enabled for this operation, a ticket is generated. If there is an existing ticket for a policy that is pending for approval, you cannot perform any operations on the same policy until the existing ticket is either approved, rejected, canceled, or expired.
MSDP WORM
WORM retention lock removal
WORM configuration change
- Select Save.
- Configure the users to be exempted from multiperson authorization.
Starting with 11.0, you can exempt users from multiperson authorization for specific operation and action for specific time frame.
- Configure email notifications that you want to send to approvers and other email recipients. You can specify additional email recipients to whom you want to send email notifications.
Click Configure to configure the SMTP server for emails.
- Go to Schedules. Then select Edit.
- Specify when you want to expire and purge the multiperson authorization tickets.
- Select Save.
- Select Configure.