Access control

Users

Note:

In the NetBackup web UI, a user must have permissions in both Users and Roles to be able to view users or to add or remove users from a role.

Table: RBAC permissions for users

Operation	Description	Additional required operations
View	API only. View users or groups in RBAC. This permission is granted automatically when the administrator uses the web UI to create a role.	N/A
Manage access	See Manage access.
Assign access to role	Assign users or groups to or remove them from RBAC roles.	View

Operation

Description

Additional required operations

View

API only. View users or groups in RBAC.

This permission is granted automatically when the administrator uses the web UI to create a role.

N/A

Manage access

Assign access to role

Assign users or groups to or remove them from RBAC roles.

View

Roles

Note:

In the NetBackup web UI, a user must have permissions in both Users and Roles to be able to view users or to add or remove users from a role.

Table: Roles

Operation	Description	Additional required operations
View	View RBAC roles.	One or more of the following permissions are also required: Create Update Delete
Create	Add RBAC roles.	View Note: If you want a role administrator to be able to grant access to certain RBAC categories in the NetBackup web UI (or namespaces), that administrator must also have View and Manage access on those namespaces. For example, a role administrator can only create a role for a VMware administrator if that administrator has View and Manage access on VMware assets (`\|ASSETS\|VMWARE\|`) or on a parent-level namespace.
Update	Edit the permissions that are related to an RBAC role.	View In the NetBackup web UI, an administrator can grant access for the namespaces on which the administrator has Manage access.
Delete	Delete an RBAC role.	View
Manage access	See Manage access.
Assign access to role	API only. Allow a role to have access to objects in RBAC. This permission is granted automatically when the administrator uses the web UI to create a role.	N/A