Add access for a user through access rules
In the NetBackup web UI, you give a user access to NetBackup through one or more access rules. Access rules are composed of:
A user or user group. This user or group can be either local or of a domain.
A role, which defines the permissions that a user has.
Role permissions only determine what kinds of actions a user can perform. What a user can access in the environment is determined by the object group.
An object group, which defines the assets, application servers, or protection plans that a user can view or manage.
When you create an access rule for a user with the role, that user has access to all objects or assets.
Before you can create an access rule, you need to do the following:
To add domain users, you must configure the Active Directory or LDAP domain with NetBackup.
Use the vssat command to configure the domains in your environment. See the NetBackup Security and Encryption Guide.
Local users do not require this authentication.
Determine which role you want to give a user.
Determine which assets or application servers that you want a user to have access to and select the appropriate object groups. Or, create the appropriate object groups.
See Add an object group.
The role permissions that a user has can be further limited by the object groups the user is granted access to. See How can I limit role permissions to specific objects or assets?.
To add access for a user
- On the left, click Security > RBAC.
- Click the Access rules tab and click Add.
- Type a domain and a user name. Click + to validate this user.
For example:
For this type of user
Use this format
Example
Local user
username
root
Domain user
DOMAIN\username
WINDOWS\Administrator
- Select a role that includes the permissions that you want to assign to the user.
- Select an object group that includes the assets that you want the user to have access to.
Note that a user with the Security administrator role has access to all objects or assets. The only available selection for that role is All objects.
- Provide a description for the access rule and click Save.