Forum Discussion

raviteja_yedlap's avatar
raviteja_yedlap
Level 3
10 years ago
Solved

NBAC access control configuration using command line

Hi,

While configuring NBAC access control on RHEL linux,is there any way to configure new users and add them to groups using CLI.Because as of now i am doing it by opening Netbackup GUI and configuring using access management tab?

Please post the solution as i need to develop the script to automate NBAC access control configuration and users configuration.

Thanks,

Raviteja

7.7
Backup and Recovery
Linux
NetBackup
  • nbutech's avatar
    nbutech
    10 years ago

    Hello,

     

    You can use bpnbaz -AddUser command

    You can download the command guide and look for bpnbaz command for lot of other switches which should help you

    NetBackup 7.6 Commands Reference Guide

    https://www.veritas.com/support/en_US/article.000003747

5 Replies

Sort By
  • nbutech's avatar
    nbutech
    Level 6
    10 years ago

    Hello,

     

    You can use bpnbaz -AddUser command

    You can download the command guide and look for bpnbaz command for lot of other switches which should help you

    NetBackup 7.6 Commands Reference Guide

    https://www.veritas.com/support/en_US/article.000003747

  • Michal_Mikulik1's avatar
    Michal_Mikulik1
    Moderator
    10 years ago

    Hello,

     

    some examples - for example, for "read only" user:

    bpnbaz -AddGroup NBU_ReadOnly /*group created */

    bpnbaz -AddPerms Browse -Group NBU_ReadOnly -Object NBU_RES_Media /*permissions to the group assigned*/

    bpnbaz -AddPerms Browse -Group NBU_ReadOnly -Object NBU_RES_Policy

    ...etc

    bpnbaz -AddUser "NBU_ReadOnly" windows:<domain>:<user> /*membership to a user granted */

    bpnbaz -DelUser "NBU_ReadOnly" windows:<domain>:<user> /*membership cancelled */

    BS

    Michal

     

     

     

     

  • raviteja_yedlap's avatar
    raviteja_yedlap
    Level 3
    10 years ago

    Hi,

    Thanks alot Michal and nbutech.It works for me,I am able create users and groups using command line now.

    Thanks for Helping

    Regards,

    Raviteja

  • raviteja_yedlap's avatar
    raviteja_yedlap
    Level 3
    10 years ago

    Hi,

    Even though i create users(example:bkpops) and gave them permission to monitor jobs.I am getting error while executing command to view jobs(bpdbjobs)

     

    [root@xxxxxxx admincmd]# ./bpnbaz -ListGroupMembers NBU_Operator
    ==========
    Type: User
    Domain Type: unixpwd
    Domain:xxxxxxxxx
    Name: bkpops

    Operation completed successfully.
    [root@xxxxxxx admincmd]#

    [bkpops@xxxxxxxx ~]$ /usr/openv/netbackup/bin/admincmd/bpdbjobs
    bpdbjobs: must be superuser to execute

    [bkpops@ixxxxxxx ~]$

    Please help me in resolving this issue.

    Regards,

    Raviteja