giving access to our DBAs to run commands related to RMAN ?

[laguns97]

Hi !
sorry for my english, i'm french speaking !
Our Master/Media servers are RedHat Linux and we have a lot of oracle clients.  We are using OIP for backup the databases.

Our DBAs asking to us if there is possibility to giving to them more independence about management oracle instance like, adding instance in policies, remove from policies, register instances etc...

I know there is possibility to use the sudo command for Netbackup commands but there is another way like API, ?

Thanks for your help !

[Nicolai]

Netbackup Role Based Access Control is the way to go for delegating access.

Either way, some investigation and planning is required.

https://www.veritas.com/content/support/en_US/doc/134641643-134641656-0/v131349555-134641656

[Nick_Morris]

It might be worth trying out to see what you can do with nboraadm command at https://www.veritas.com/content/support/en_US/doc/15263389-150229497-0/v76045170-150229497 I know we can let a DBA register an instance in there (though we need to run the below to allow them to do it):

DBAs can run nboraadm on a NetBackup client if the backup administrator enables access to nboraadm by running the following command on the master server:

# nboraadm -add_dba <client_name> <user_name>

I've not tried to modify a policy, so i don't know how possible it is, but it could work.

As mentioned, NetBackup RBAC is another potential way to do it.

[laguns97]

Thanks !!!  I will check this for sure !!!!