About user accounts
The NetVault MSP administrator provides privileges to user group, and the users associated with the group get those privileges. MSP administrator also assigns appropriate privileges, group memberships, and quota to the tenant accounts based on the functions the tenant users need to perform. You must also have an Active Directory (AD) environment, where you need to create AD users and must integrate with NetVault Server, and manage user groups. For more information see, Integrating Active Directory with NetVault.
For example, For an MSP administrator, the AD administrator creates a separate unique group in AD, and then MSP administrator adds this group and provides privileges to users of this group to perform MSP administrators role and ensures to enable secure mode to avoid any unauthorized access to NetVault Server. See, Using Secure Mode.
There are three types of user accounts in NetVault for MSP:
About user and group privileges and presets
A privilege is a permission to perform a specific task in NetVault.
To accomplish any task in NetVault, MSP administrator must assign appropriate privileges to tenant administrator group and tenant user group. If the user group does not have the privileges, the request is denied. In NetVault, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault, see User privileges.
A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.
NetVault includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets includes the following: MSP administrator, tenant administrator, and tenant user. For more information about the privileges included in these sets, see Predefined Presets.
The MSP administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.
Role-based User and Groups privileges
Configuring user details
1 |
On the Manage User Accounts and User Groups, click Modify Details. |
|
|
Identification |
Under Identification, provide the following details:
NOTE: Do not use the @ symbol in the User Name field.
• |
Real Name: In Real Name, specify the actual name of the user. | |
Contact Information |
Under Contact Information, provide the following details:
• |
Email-1: Use this box to specify the primary email addresses for the user account. |
• |
Email-2: Use this box to specify any additional email address for the user account. |
• |
Email-3: Use this box to specify any additional email address for the user account. |
• |
Telephone: Use this box to specify the telephone number for the user account. |
• |
Cellular: Use this box to specify the mobile phone number for the user account. |
• |
Pager: Use this box to specify the pager number for the user account. |
|
Other Details |
Under Other Details, provide the following details:
• |
Workstation: Use this box to specify the workstation name. |
• |
Description: Use this box to specify the workstation description. |
• |
Location: Use this box to specify the workstation location. |
• |
Password never expires: By default, this option is selected. To apply the password policy settings for a user account, clear this option. |
NOTE: You can use the Password never expires option for the user accounts, if password for the selected user does not need to expire. |
3 |
Click Apply to save the user details, and return to the Manage User Accounts and User Groups page. |