Authorizing Restore only to VM Admins

[Andrew_Madsen]

In our environment we have trust issues. Our Backup administrators do not trust our VM admins to not mess up the backup environment if they are given full access to the administration console and our VM admins do not trust our backup admins to do a VM restore to then VM environment. And besides our Backup Admins do not want to do the restore either.

I have tried to figure out how to maneuver the Java console to allow for VM restores but it just insists that that type of restore requires full administrator privileges. Any ideas as to how I can get around this?

NBU environment 7.5.0.6 running on SLES 11 (soon to be 7.6.0.1)

[SymTerry]

As mentioned in HOWTO46939, you will want to grant them permissions to certain authorization objects

Also, you can just give them access to the java restore console (jbpSA), and not jnbsa (NetBackup console) for restores. But this will come down to user training.

[Andrew_Madsen]

That is fine if you are using NBAC but we are not and the jbpSA is not available in a VM environment.

[m1ndbender · Accepted solution]

VMware?

You mentioned upgrading to 7.6.0.1. Have you looked at the vCenter plugin? I haven't dug too much into it, but it looks promising.

With the NetBackup plug-in for vCenter, you can use vSphere Client to monitor

virtual machine backups and recover a virtual machine from a backup.

You can use the plug-in to do the following:

■ View the backup status of virtual machines at various vSphere levels. For

example: Datacenter, resource pool, ESXi host.

■ View messages that are related to backups, such as snapshot deletion failure.

■ Sort and filter the backup information and export the information for analysis.

■ Recover virtual machines.

http://www.symantec.com/business/support/index?page=content&id=doc6288

[Andrew_Madsen]

Thank you! I had thought there was a plug-in but when I could only find a reference to a 7.5 beta and nothing else I was doubting my memory. This should work nicely.