NetVault 13.3.2 - Administration Guide

About user accounts

The NetVault administrator can set up different user accounts, and assign appropriate privileges, group memberships, and quota to these accounts based on the functions the users need to perform.

For example, the administrator can create a user account for Database Administrator and grant this account the privileges to perform backups and restores of the database systems. Similarly, the administrator can create a user account to manage clients or storage devices.

There are two predefined user accounts in NetVault:

These user accounts are used to perform various tasks from the NetVault WebUI and CLI. The admin and default user accounts are assigned all privileges in NetVault. By default, no password is assigned to the admin and default user accounts. To prevent unauthorized access to the NetVault Server, you can assign a secure password to these user accounts.

NOTE: Only the administrator account can create and manage user accounts in NetVault. Non‑administrator user accounts can only change or reset their own passwords.

If your environment uses Active Directory (AD) or Microsoft Azure Active Directory (Azure AD), you can also integrate AD and Azure AD users with NetVault, as well as manage user groups. For more information, see Integrating Active Directory with NetVault and Using Azure Active Directory as an identity provider.

About user and group privileges and presets

A privilege is a permission to perform a specific task in NetVault.

To accomplish any task in NetVault, a user must have the required NetVault privileges. If a user does not have the privileges, the request is denied. In NetVault, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault, see User privileges.

A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.

NetVault includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets include the following: Administrator, Backup Administrator, Backup Operator, Media Operator, Monitor, and Helpdesk. For more information about the privileges included in these sets, see Predefined Presets.

The administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.

Creating a user account

User accounts can be created from the Manage User Accounts and User Groups page. Only the administrator can create and manage user accounts in NetVault.

NOTE: The NetVault Server does not delete the user account if you exit without completing the user addition procedure. If you do not require the user account, you must manually delete it from the Manage User Accounts and User Groups page. For more information, see Deleting a user account.

Setting user password

IMPORTANT: You can only assign or update the password for a local NetVault user. Password management for AD users and Azure AD users is managed by Active Directory and Microsoft Azure Active Directory, respectively.