Forum Discussion

Dav1234's avatar
Dav1234
Level 5
2 years ago

NBAC/RBAC

Hello Experts,

 would like to restrict the netbackup admin console access to other users so that they cannot start manual backup, restart, delete, modify etc... but they should have access to verify all the details in activity monitor and policy details.

I just dont want to resticts the access to specific component but on the persmission level.

Can i configure NBAC to restrict the Netbackup console access as i am running on 9.1.0.1? or do i need to go with RBAC?

Master server OS: Linux 8

Netbackup Version: 9.1.0.1

 

 

Linux
  • quebek's avatar
    quebek
    Moderator
    2 years ago

    Hello

    Yes Role Based Access Control - RBAC is what you should have looked at...

    I would first read about it with full understanding prior implementing in prod env. good luck.

  • Nicolai's avatar
    Nicolai
    Moderator
    2 years ago

    Don't go the NBAC way, RBAC is built into the product. NBAC is glued on top of NBU back in time.

    NBAC can't do what you want to do , so another reason for not going on a NBAC journey ;)

    • davidmoline's avatar
      davidmoline
      Level 6
      2 years ago

      Also, NBAC is meant to be going away at sometime in the future.

      RBAC is definitely the way, although this only operates through the WebUI (and API). If you are still intent on using the Java GUI, then there is a limited amount of control you can provide using the auth.conf file (refer to the NetBackup Administrator's Guide volume 1 for more details on the JavaUI control - Ch 34 for 9.0). 

  • annoyworry's avatar
    annoyworry
    Level 0
    2 years ago

    I want to prevent other users from accessing the netbackup admin panel so they can't initiate manual backups or restart or delete or edit existing ones, but I still want them to be able to see the activity monitor and policy information. Can I use NBAC to limit who may access the Netbackup console if I'm using version 9.1.0.1? or should I instead use RBAC? driving directions

     

  • StefanosM's avatar
    StefanosM
    Level 6
    2 years ago

    Think of NBAC as if it does not exist.

    You cannot restrict admin access with the Java GUI. 
    Your option is to give read-only access using the Web UI (RBAC).