VMware assets
Permissions for VMware assets allow users to view, protect, and restore VMware assets.
Beginning with NetBackup 9.1, the following updates have been made:
You can give one or more job permissions to specific VMware assets.
The permissions for the Default VMware Administrator role give a user the ability to view and manage jobs for VMware assets. The role no longer includes the global permission to view all jobs for any asset.
Table: RBAC permissions for VMware assets
Operation | Description | Additional required operations |
|---|---|---|
View | View VMs, vCenter servers, and ESX hosts. | |
View VM intelligent groups. | On the vCenter that corresponds to the VM group: View | |
Create | Add ESX hosts or vCenter hosts. Validate credentials. | View |
Add VM intelligent groups. | View | |
On the vCenter that corresponds to the VM group: View | ||
Update | Update ESX hosts or vCenter hosts and their credentials. Validate credentials. | View |
Update VM intelligent groups. | View | |
On the vCenter that corresponds to the VM group: View | ||
Delete | Delete ESX hosts or vCenter hosts. | View |
Delete VM intelligent groups. | View | |
On the vCenter that corresponds to the VM group: View | ||
Manage access | See Manage access. | View |
Protect | Add VMware assets to or remove them from protection plans. | View |
Add VMware intelligent groups to or remove them from protection plans. | On the vCenter that corresponds to the VM group: View Protect | |
View restore targets | View the available destinations to which to restore an asset. | View |
Restore to cloud | Restore a VM to the cloud. | View |
Granular restore | Restore individual files or folders from a VM. This permission is required on the source and the target VM. | View NetBackup management > NetBackup backup images > View NetBackup management > NetBackup backup images > View contents |
Instant access - Download files | Download individual files using instant access technology. | View NetBackup management > NetBackup backup images > View |
Instant access - Restore files | Restore individual files using instant access technology. | View NetBackup management > NetBackup backup images > View NetBackup management > NetBackup backup images > View contents |
Instant access | Create an instant access VM. | View NetBackup management > NetBackup backup images > View |
Restore | Restore to the original or to an alternate location. | View NetBackup management > NetBackup backup images > View NetBackup management > Access hosts > View |
On the target location: View restore targets | ||
Allow restore to overwrite | Allow a restore to overwrite an existing asset. Without this permission a user must restore an existing asset to a different location. | View Restore |
Cancel jobs | Cancel a job for a VMware asset. | View jobs |
Restart jobs | Restart any job for a VMware asset. | View jobs |
View jobs | View any job for a VMware asset. |