you might want to read up but this is what I know.
I am a unix admin by job, but also am in charge of netbackup.
I have two logins - normal and a windows admin account (anormal)
I can log into a windows media server with my anormal name and do restores to windows or unix. I can do this because I have logged INTO a server that is a master or media server ( meaning the "server" has restore rights - and I am an admin).
I also have the admin console on my pc.
I can open this ( remember I have logged into my pc with my normal name) and I can do restores. I can do this becase on the master server properties under the "server" list. My laptops name is listed under Additional servers.
The warning on this is that setting up this way they can also change policies, delete policies.... or anything else to destroy your netbackup configuration.
I have not set up but know that you can use Access Management and set up authoriztion and say what things they can do like restores only.... but I have never done this.
