In all honesty, I've never done it myself. At our customers, the DBA's understand that RMAN is their responsibility. They simply tell the backup admins which tape numbers they need for restore...
Lets see what we can find in the manual...
p.117 & 118:
Running the NetBackup for Oracle recovery wizard
on the client:
(This tells me it HAS to be run on the client)...
How the recovery wizard works
The recovery wizard saves a recovery template locally in a user-specified location
on the NetBackup client. Recovery templates are not stored on the master server because
recovery is always user directed, not scheduled.
The recovery process sometimes requires passwords for Oracle database access and system user accounts.
Since you must be connected to the database before you can access its tables or views, logon criteria must be provided. When a user selects or expands a database node the wizard first tries to logon to the database using OS authentication. If the authentication fails the user is solicited for a user name and password. Optionally, the user is prompted for the Net Service Name if the connection is through SQL-Net, which is then used to logon to the database.
This user must have a sysdba privilege since the logon credentials that are also used to perform the RMAN restore. The logon fails if the database is not in a mount or open state.
....
To start the Backup, Archive, and Restore interface from the command line, run the following command:
/usr/openv/netbackup/bin/
jbpSA &