NetVault 13.1.2 - Administration Guide


	NOTE: You can delete a predefined Preset, but when you restart the NetVault Server, the set is recreated. The default settings are restored for the predefined presets when these sets are recreated on server restart.

To delete a Preset:

In the Navigation pane, click Users and Groups.

On the Manage User Accounts and User Groups page, click Privileges and Quotas.

In the Privileges Presets list, select the Preset that you want to delete, and click Delete.

In the confirmation dialog box, click OK.

User privileges

The following table provides a brief description of the types of user privileges in NetVault.

Table 107. User privileges in NetVault

Privilege

Description

Clients — Add/remove clients

Permission to add and remove NetVault Clients.

Clients — Add/remove virtual/clustered clients

Permission to add and remove virtual clients.

Clients — Administer client groups

Permission to create, modify, and delete client groups.

Clients — Configure client

Permission to configure clients.

Clients — Get client properties

Permission to view client properties.

Clients — Set firewall relationship

Permission to set firewall relationship between the NetVault Server and Client.

Device — Add or Update Snapshot Array

Permission to add or modify Snapshot Array.

Device —Manage Snapshot Array

Permission to manage snapshots using Explore Snapshot feature

Devices — Add libraries

Permission to add tape libraries to the NetVault Server.

Devices — Add Random Access Store

Permission to add disk-based backup devices.

Devices — Add simple drives

Permission to add standalone drives to the NetVault Server.

Devices — Clean drives

Permission to run the Clean command for a drive.

Devices — Manage devices

Permission to perform device management tasks.

Devices — Open and close entry/exit ports

Permission to issue commands to open or close the entry/exit ports.

Devices — Open and close library doors

Permission to issue commands to open or close the library doors.

Devices — Perform device checks

Permission to run check off-line devices.

Devices — Reconfigure devices

Permission to reconfigure added devices.

Devices — Remove devices

Permission to remove devices from the NetVault Server.

Devices — Set drive cleaning properties

Permission to set the drive cleaning options.

Devices — Update Random Access Store

Permission to modify disk-based backup devices.

Jobs — Abort jobs

Permission to abort active jobs.

Jobs — Acknowledge policy errors

Permission to acknowledge policy errors and remove the error flags.

Jobs — Administer backup/restore sets

Permission to create, modify, and delete NetVault Sets.

Jobs — Administer policies

Permission to create and manage policies.

Jobs — Delete job

Permission to delete NetVault jobs.

Jobs — Delete scheduled phase

Permission to delete scheduled jobs.

Jobs — Hold job

Permission to place jobs on hold.

Jobs — Jobs owned by this user may run

Permission to submit and run NetVault jobs.

NOTE: This user privilege lets you submit or run a job, but it does not let you create or modify jobs. To create backup and restore jobs, you require the following user privileges:

•

Jobs — Submit/update backup Jobs

•

Jobs — Submit/update restore Jobs

Jobs — Quiesce policy

Permission to place backup policies in a quiesced state.

Jobs — Restart job

Permission to restart Plug-in for FileSystem backups.

Jobs — Resume job

Permission to resume jobs placed on hold.

Jobs — Run predefined jobs instantly

Permission to issue the Run Now command.

Jobs — Stop Job

Permission to stop active Plug-in for FileSystem backups.

Jobs — Submit/update backup jobs

Permission to create and modify backup jobs.

NOTE: This user privilege lets you create and modify backup jobs, but it does not let you run a backup job. To run a job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — Submit/update restore jobs

Permission to create and modify restore jobs.

NOTE: This user privilege lets you create and modify restore jobs, but it does not let you run a restore job. To run a restore job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — View backup jobs

Permission to view backup job definitions.

Jobs — View backup/restore sets

Permission to view set definitions.

Jobs — View policies

Permission to view policy definitions.

Jobs — View restore jobs

Permission to view restore job definitions.

Media — Blank ANSI media

Permission to blank ANSI media.

Media — Blank bad media

Permission to blank a bad media item.

Media — Blank media

Permission to blank media.

Media — Blank non-NetVault media

Permission to blank non-NetVault media.

Media — Export media

Permission to export media to entry/exit port.

Media — Get media or device item status

Permission to view device and media status.

Media — Import media

Permission to import NetApp VTL’s shadow tapes.

Media — List media

Permission to view media list.

Media — Load/unload media from drives

Permission to load and unload media from drives.

Media — Manage media requests

Permission to change media request priority and place media request on hold.

Media — Mark media for re-use

Permission to manually mark media for reuse.

Media — Modify backup expiry data

Permission to modify the retirement period for backups.

Media — Remove media

Permission to remove media information from the NetVault Database.

Media — Scan foreign media

Permission to scan foreign media items and import backups residing on them.

Media — View and diagnose media requests

Permission to view and diagnose Media requests.

Media — View backup expiry data

Permission to view the retirement period for backups.

Media — View media properties

Permission to view media properties.

Media — Write media labels

Permission to perform individual and bulk media labeling operations.

Reports — Modify/edit report Jobs

and components

Permission to create and modify user-defined reports and report components.

Reports — View and run reports

Permission to generate and view reports.

StorageTier — Administer Storage Tier

Permission to create, modify, and delete storage tier.

StorageTier — List Storage Tier

Permission to view storage tier list.

System — Change global notification

profile

Permission to set up global notification profile for NetVault.

System — Dump log entries

Permission to generate log dumps in text, binary, or database table dump formats.

System — Install/remove software

packages

Permission to install and remove NetVault plug-ins.

System — Install license

Permission to install product license keys.

System — Manage dashboards

Permission to manage NetVault dashboard.

System — Permitted to use CLI tools

Permission to use the CLI utilities.

System — Purge log entries

Permission to delete log messages from the NetVault Database.

System — View dashboards

Permission to view NetVault dashboard.

Users — Administer user accounts

Permission to create, modify, or delete user accounts.

Users — Reset password for user

Permission to reset password for user accounts.

Server- Manage Server Settings

Permission to manage server settings.

Server - View Events

Permission to view events.

Server - View Logs

Permission to view logs.

Service - Administer and restart

Permission to administer and restart the NetVault services.

Predefined Presets

•

Administrator: This role allows the user to administer NetVault and perform all functions in NetVault.

•

Backup Administrator: This role allows the user to administer backup and restore jobs and perform device- and media-related functions.

•

Backup Operator: This role allows the user to run and manage backup jobs. This role also allows the user to administer restore jobs.

•

Helpdesk: This role allows the user to perform restore jobs.

•

Media Operator: This role allows the user to perform device- and media-related functions.

•

Monitor: This role allows the user to monitor clients, devices, jobs, and storage media.

The following table lists the privileges included in the predefined Presets.

Table 108. Predefined Presets
Privilege	Administrator	Backup Administrator	Backup Operator	Helpdesk	Media Operator	Monitor
Clients — Add/remove clients	X
Clients — Add/remove virtual/clustered clients	X
Clients — Administer client groups	X
Clients — Configure client	X
Clients — Get client properties	X	X	X	X		X
Clients — Set firewall relationship	X	X
Device — Add or Update Snapshot Array	X	X
Devices — Add libraries	X	X
Devices — Add Random Access Store	X	X
Devices — Add simple drives	X	X
Devices — Clean drives	X	X			X
Devices — Manage devices	X	X
Devices — Open and close entry/exit ports	X	X			X
Devices — Open and close library doors	X	X			X
Devices — Perform device checks	X	X			X	X
Devices — Reconfigure devices	X	X
Devices — Remove devices	X	X
Devices — Set drive cleaning properties	X	X			X
Devices — Update Random Access Store	X	X
Jobs — Abort jobs	X	X	X
Jobs — Acknowledge policy errors	X	X	X
Jobs — Administer backup/restore sets	X	X	X	X
Jobs — Administer policies	X	X
Jobs — Delete job	X	X
Jobs — Delete scheduled phase	X	X	X
Jobs — Hold job	X	X	X
Jobs — Jobs owned by this user may run	X	X	X	X
Jobs — Quiesce policy	X	X	X
Jobs — Restart job	X	X	X
Jobs — Resume job	X	X	X
Jobs — Run predefined jobs instantly	X	X	X	X
Jobs — Stop Job	X	X	X
Jobs — Submit/update backup jobs	X	X	X
Jobs — Submit/update restore jobs	X	X	X	X
Jobs — View backup jobs	X	X	X	X		X
Jobs — View backup/restore sets	X	X	X	X		X
Jobs — View policies	X	X	X	X		X
Jobs — View restore jobs	X	X	X	X		X
Media — Blank ANSI media	X	X			X
Media — Blank bad media	X	X			X
Media — Blank media	X	X
Media — Blank non-NetVault media	X	X
Media — Export media	X	X			X
Media — Get media or device item status	X	X			X
Media — Import media	X	X			X
Media — List media	X	X	X	X	X	X
Media — Load/unload media from drives	X	X	X		X
Media — Manage media requests	X	X			X
Media — Mark media for re-use	X	X			X
Media — Modify backup expiry data	X	X			X
Media — Remove media	X	X			X
Media — Scan foreign media	X	X			X
Media — View and diagnose media requests	X	X	X		X	X
Media — View backup expiry data	X	X			X
Media — View media properties	X	X	X		X	X
Media — Write media labels	X	X			X
Reports — Modify/edit report Jobs and components	X	X				X
Reports — View and run reports	X	X				X
Storage Tier — Administer storage tier	X	X			X
Storage Tier — List storage tier	X	X	X		X	X
System — Change global notification profile	X	X
System — Dump log entries	X	X	X
System — Install/remove software packages	X
System — Install license	X
System — Manage dashboards	X
System — Permitted to use CLI tools	X	X
System — Purge log entries	X	X
System — View dashboards	X	X	X	X	X	X
Users — Administer user accounts	X
Users — Reset password for user	X

Integrating Active Directory with NetVault

NetVault installed on a Windows or Linux machine can communicate with Microsoft Active Directory (AD). Additionally, NetVault installed on a Linux machine can communicate with OpenLDAP Directory Services and Samba Active Directory. Integrating AD with NetVault enables role-based access control in NetVault. It lets users log in to NetVault using their AD credentials. It also lets AD users manage NetVault users.


	NOTE: NetVault Server supports Secure Light Directory Access Protocol (LDAPS) protocol for both Microsoft Active Directory (AD) and OpenLDAP Directory.


	IMPORTANT: During Active Directory integration with NetVault, the Active Directory service must always be available. Additionally, the NetVault Server should be a member of the domain.

Adding an AD group to NetVault and specifying privileges, levels of access, and notifications for the group ensures that members of the group have the corresponding access from the first time that they log on.

•

Considerations for Linux-based NetVault

•

Managing AD users

•

Managing AD groups