サポートと今すぐチャット
サポートとのチャット

NetVault 12.4 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting
Common errors Safe Mode in NetVault Backup

User privileges

The following table provides a brief description of the types of user privileges in NetVault Backup.

 
Table 114. User privileges in NetVault Backup
Privilege
Description

Clients — Add/remove clients

Permission to add and remove NetVault Backup Clients.

Clients — Add/remove virtual/clustered clients

Permission to add and remove virtual clients.

Clients — Administer client groups

Permission to create, modify, and delete client groups.

Clients — Configure client

Permission to configure clients.

Clients — Get client properties

Permission to view client properties.

Clients — Set firewall relationship

Permission to set firewall relationship between the NetVault Backup Server and Client.

Device — Add or Update Snapshot Array

Permission to add or modify Snapshot Array.

Device —Manage Snapshot Array

Permission to manage snapshots using Explore Snapshot feature

Devices — Add libraries

Permission to add tape libraries to the NetVault Backup Server.

Devices — Add Random Access Store

Permission to add disk-based backup devices.

Devices — Add simple drives

Permission to add standalone drives to the NetVault Backup Server.

Devices — Clean drives

Permission to run the Clean command for a drive.

Devices — Manage devices

Permission to perform device management tasks.

Devices — Open and close entry/exit ports

Permission to issue commands to open or close the entry/exit ports.

Devices — Open and close library doors

Permission to issue commands to open or close the library doors.

Devices — Perform device checks

Permission to run check off-line devices.

Devices — Reconfigure devices

Permission to reconfigure added devices.

Devices — Remove devices

Permission to remove devices from the NetVault Backup Server.

Devices — Set drive cleaning properties

Permission to set the drive cleaning options.

Devices — Update Random Access Store

Permission to modify disk-based backup devices.

Jobs — Abort jobs

Permission to abort active jobs.

Jobs — Acknowledge policy errors

Permission to acknowledge policy errors and remove the error flags.

Jobs — Administer backup/restore sets

Permission to create, modify, and delete NetVault Backup Sets.

Jobs — Administer policies

Permission to create and manage policies.

Jobs — Delete job

Permission to delete NetVault Backup jobs.

Jobs — Delete scheduled phase

Permission to delete scheduled jobs.

Jobs — Hold job

Permission to place jobs on hold.

Jobs — Jobs owned by this user may run

Permission to submit and run NetVault Backup jobs.

NOTE: This user privilege lets you submit or run a job, but it does not let you create or modify jobs. To create backup and restore jobs, you require the following user privileges:
•
Jobs — Submit/update backup Jobs
•
Jobs — Submit/update restore Jobs

Jobs — Quiesce policy

Permission to place backup policies in a quiesced state.

Jobs — Restart job

Permission to restart Plug-in for FileSystem backups.

Jobs — Resume job

Permission to resume jobs placed on hold.

Jobs — Run predefined jobs instantly

Permission to issue the Run Now command.

Jobs — Stop Job

Permission to stop active Plug-in for FileSystem backups.

Jobs — Submit/update backup jobs

Permission to create and modify backup jobs.

NOTE: This user privilege lets you create and modify backup jobs, but it does not let you run a backup job. To run a job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — Submit/update restore jobs

Permission to create and modify restore jobs.

NOTE: This user privilege lets you create and modify restore jobs, but it does not let you run a restore job. To run a restore job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — View backup jobs

Permission to view backup job definitions.

Jobs — View backup/restore sets

Permission to view set definitions.

Jobs — View policies

Permission to view policy definitions.

Jobs — View restore jobs

Permission to view restore job definitions.

Media — Blank ANSI media

Permission to blank ANSI media.

Media — Blank bad media

Permission to blank a bad media item.

Media — Blank media

Permission to blank media.

Media — Blank non-NetVault media

Permission to blank non-NetVault Backup media.

Media — Export media

Permission to export media to entry/exit port.

Media — Get media or device item status

Permission to view device and media status.

Media — Import media

Permission to import NetApp VTL’s shadow tapes.

Media — List media

Permission to view media list.

Media — Load/unload media from drives

Permission to load and unload media from drives.

Media — Manage media requests

Permission to change media request priority and place media request on hold.

Media — Mark media for re-use

Permission to manually mark media for reuse.

Media — Modify backup expiry data

Permission to modify the retirement period for backups.

Media — Remove media

Permission to remove media information from the NetVault Database.

Media — Scan foreign media

Permission to scan foreign media items and import backups residing on them.

Media — View and diagnose media requests

Permission to view and diagnose Media requests.

Media — View backup expiry data

Permission to view the retirement period for backups.

Media — View media properties

Permission to view media properties.

Media — Write media labels

Permission to perform individual and bulk media labeling operations.

Reports — Modify/edit report Jobs

and components

Permission to create and modify user-defined reports and report components.

Reports — View and run reports

Permission to generate and view reports.

StorageTier — Administer Storage Tier

Permission to create, modify, and delete storage tier.

StorageTier — List Storage Tier

Permission to view storage tier list.

System — Change global notification

profile

Permission to set up global notification profile for NetVault Backup.

System — Dump log entries

Permission to generate log dumps in text, binary, or database table dump formats.

System — Install/remove software

packages

Permission to install and remove NetVault Backup plug-ins.

System — Install license key

Permission to install product license keys.

System — Manage dashboards

Permission to manage NetVault Backup dashboard.

System — Permitted to use CLI tools

Permission to use the CLI utilities.

System — Purge log entries

Permission to delete log messages from the NetVault Database.

System — View dashboards

Permission to view NetVault Backup dashboard.

Users — Administer user accounts

Permission to create, modify, or delete user accounts.

Users — Reset password for user

Permission to reset password for user accounts.

Server- Manage Server Settings

Permission to manage server settings.

Server - View Events

Permission to view events.

Server - View Logs

Permission to view logs.

Service - Administer and restart

Permission to administer and restart the NetVault Backup services.

Predefined Presets

NetVault Backup includes three predefined Presets, based on user specific roles.

The predefined Presets include the following:

•
Administrator: The administrator role allows MSP administrator to manage the tenants and perform all the administrative functions in NetVault Backup.
•
Tenant Administrator: The tenant administrator role allows to manage all the tenant users and tenant clients for an organization.
•
Tenant User: The tenant users roles allows them to use NetVault Backup to protect their authorized client systems.

The following table lists the privileges included in the predefined Presets.

 
Table 115. Predefined Presets
Privilege
Administrator
Tenant administrator
Tenant user

Clients — Add/remove clients

X

X

 

Clients — Add/remove virtual/ clustered clients

X

X

 

Clients — Administer client groups

X

X

X

Clients — Configure client

X

X

 

Clients — Get client proper-ties

X

X

X

Clients — Set firewall relationship

X

X

X

Device — Add or Update Snapshot Array

X

X

 

Devices — Add libraries

X

 

 

Devices — Add Random Access Store

X

 

 

Devices — Add simple drives

X

 

 

Devices — Clean drives

X

 

 

Devices — Manage devices

X

 

 

Devices - Manage Array Snapshot

X

X

X

Devices — Open and close entry/exit ports

X

 

 

Devices — Open and close library doors

X

 

 

Devices — Perform device checks

X

 

 

Devices — Reconfigure devices

X

 

 

Devices — Remove devices

X

 

 

Devices — Set drive cleaning properties

X

 

 

Devices — Update Random Access Store

X

 

 

Jobs — Abort jobs

X

X

X

Jobs — Acknowledge policy errors

X

X

X

Jobs — Administer back-up/restore sets

X

X

X

Jobs — Administer policies

X

X

 

Jobs — Delete job

X

X

X

Jobs — Delete scheduled phase

X

X

X

Jobs — Hold job

X

X

X

Jobs — Jobs owned by this user may run

X

X

X

Jobs — Quiesce policy

X

X

 

Jobs — Restart job

X

X

X

Jobs — Resume job

X

X

X

Jobs — Run predefined jobs instantly

X

X

X

Jobs — Stop Job

X

X

X

Jobs — Submit/update backup jobs

X

X

X

Jobs — Submit/update re-store jobs

X

X

X

Jobs — View backup jobs

X

X

X

Jobs — View back-up/restore sets

X

X

X

Jobs — View policies

X

X

X

Jobs — View restore jobs

X

X

X

Media — Blank ANSI media

X

X

 

Media — Blank bad media

X

X

 

Media — Blank media

X

 

 

Media — Blank non-NetVault media

X

X

 

Media — Export media

X

 

 

Media — Get media or device item status

X

 

 

Media — Import media

X

 

 

Media — List media

X

X

X

Media — Load/unload media from drives

X

 

 

Media — Manage media requests

X

 

 

Media — Mark media for re-use

X

X

 

Media — Modify backup expiry data

X

X

X

Media — Remove media

X

 

 

Media — Scan foreign media

X

 

 

Media — View and diagnose media requests

X

 

 

Media — View backup expiry data

X

X

X

Media — View media properties

X

 

 

Media — Write media labels

X

 

 

NetVault Appliance - Adjust System Configuration

X

 

 

NetVault Appliance - Create Storage Containers

X

 

 

NetVault Appliance - Delete Storage Containers

X

 

 

Reports — Modify/edit report Jobs and components

X

X

X

Reports — View and run reports

X

X

X

Server — Manage Server Settings

X

 

 

Server — View events

X

X

X

Server — View logs

X

X

X

Services — Administer and restart

X

 

 

Storage Tier — Administer storage tier

X

 

 

Storage Tier — List storage tier

X

X

X

System — Change global notification profile

X

 

 

System — Dump log entries

X

X

X

System — Install/remove software packages

X

X

 

System — Install license key

X

 

 

System — Manage dashboards

X

X

X

System — Manage Operator Messages

X

X

X

System — Permitted to use CLI tools

X

 

 

System — Purge log entries

X

 

 

System — View dashboards

X

X

X

Users — Administer user accounts

X

 

 

Users — Reset password for user

X

 

 

Integrating Active Directory with NetVault Backup

Integrating AD with NetVault Backup enables role-based access control in NetVault Backup. It lets users log in to NetVault Backup using their AD credentials. It also lets AD users manage NetVault Backup users.

 
* 
IMPORTANT: During Active Directory integration with NetVault Backup, the Active Directory service must always be available. Additionally, the NetVault Backup Server should be a member of the domain.

Adding an AD group to NetVault Backup and specifying privileges, levels of access, and notifications for the group ensures that members of the group have the corresponding access from the first time that they log on.

•
Managing AD users
•
Managing AD groups

Considerations for Linux-based NetVault Backup

Before you integrate Active Directory (AD) with a Linux-based installation of NetVault Backup, consider the following conditions and prerequisites:

•
To let the Linux server communicate with AD, integrate NetVault Backup with the domain controller using Samba Winbind or System Security Services Daemon (SSSD).
•
Host name of the Linux machine should be set to its FQDN. (For example, mymachine.mydomain.com)
•
Enable the use of fully qualified domain names on the Linux machine on which NetVault Backup is installed. Short names are not permitted.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind use default domain = no
•
SSSD: under the [domain/<domain name>] section, sssd.conf must have the following entry:
use_fully_qualified_names = True
•
On the Linux machine where NetVault Backup is installed, to retrieve all domain controller groups, enable enumeration of group databases.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind enum groups = yes
•
SSSD: Under the [domain/<domain name>], to retrieve domain controller groups and to fetch groups from child and trusted domains, respectively, the sssd.conf must have the following entries:
enumerate = True
subdomain_enumerate = all
•
While logging in or adding a domain user, using the DNS suffix with the domain name is recommended; for example, domain.local\user or username@dns.local.
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択