User sessions and authentication

API keys

These permissions allow a user to view and manage NetBackup API keys.

A NetBackup-authenticated user can view and manage their own API key using the web UI. If a user is not assigned to a role, the user can use the NetBackup APIs to manage their API.

Table: RBAC permissions for API keys

Operation	Description	Additional required operations
View	View API keys.
Create	Create API keys.	View
Update	Change the expiration date for an active API key.	View
Delete	Delete API keys.	View
Manage access	See Manage access.

User certificates

These permissions allow a user to view and manage the configuration that allows NetBackup authentication with user certificates or smart cards. Note: Authentication domains must be configured for the master server before you can configure and enable smart card authentication.

Table: User certificates

Operation	Description	Additional required operations
View	View settings for smart card authentication.	Global > Security > Global security settings > Update
Create	Upload external CA certificates to the smart card authentication trust-store.	Global > Security > Global security settings > Update
Delete	Delete external CA certificates from the smart card authentication trust-store.	Global > Security > Global security settings > Update
Manage access	See Manage access.

User sessions

Note:

Users also need Hosts permissions to view the User account settings in User sessions. See NetBackup hosts.

These permissions allow a user to view and manage user sessions and user account settings.

Table: RBAC permissions for user sessions

Operation	Description	Additional required operations
View	View active user sessions.
Update	Enable, update, or disable sign-in banner configuration in the User account settings.	View NetBackup management > Hosts > View
	Enable, update, or disable the following settings in the User account settings. Maximum concurrent sessions User account lockout Sign-in banner configuration	Update NetBackup management > Hosts > View NetBackup management > Hosts > Create NetBackup management > Hosts > Update
Delete
Close user session	Close the selected user sessions.	View
Close all user sessions	Close all user sessions. Without this permission, the administrator can only close the selected user sessions.	View
Unlock	Unlock a user that has an account that is locked out of NetBackup.	View locked
View locked	View any users that are locked out of NetBackup.
Manage access	See Manage access.	View

User sessions and authentication

Feedback

Feedback