Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section IX. Administering NetBackup
  4. Using the NetBackup Remote Administration Console
  5. About authorizing specific tasks in the Backup, Archive, and Restore user interface
Veritas NetBackup™ Administrator's Guide, Volume I

About authorizing specific tasks in the Backup, Archive, and Restore user interface

The Backup, Archive, and Restore interface can be configured to let only a user perform certain tasks. Not all tasks can be performed successfully without some additional configuration.

The following require additional configuration and are documented elsewhere:

  • Redirected restores.

    See About server-directed restores.

    See About client-redirected restores.

  • User backups or archives require a policy schedule of these types and the task to be submitted within the time window of the schedule.

To authorize users for a subset of Backup, Archive, and Restore capabilities, use the following identifiers for the JBP keyword in the auth.conf file:

Table: Identifiers for the JBP keyword in the auth.conf file

Identifier

Description

ENDUSER

Allows the users to perform restore tasks from true image or regular backups plus redirected restores.

BU

Allows the users to perform backup tasks.

ARC

Allows the users to perform archive tasks. The capability to perform backups (BU) is required to allow archive tasks.

RAWPART

Allows the users to perform raw partition restores.

ALL

Allows the users to perform all actions, including server-directed restores. (Restores to a client that is different from the client that is logged into.) Server-directed restores can only be performed from a NetBackup master server.

For example, to allow a user (user1) to restore but not backup up or archive files:

user1 ADMIN=JBP JBP=ENDUSER

Feedback

Was this page helpful?
Previous

About authorizing nonroot users for specific applications

Next

Run-time configuration options for the NetBackup Administration Console

Feedback

Was this page helpful?