Chat now with support
Chat with Support

NetVault 12.1 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting

Adding an AD user

The preferred method of adding an AD user is for the applicable user to log in and let NetVault Backup complete the authentication process. However, if you have the applicable privileges, at a minimum, you must have the Users — Administer user accounts privilege, you can manually add the user, where it will also consider the privileges defined to selected user before renaming to AD user.

When you add an AD user to the NetVault Backup server, NetVault Backup automatically fetches the respective user information from AD and populates it in the NetVault Backup user details. If NetVault Backup server is configured in secure mode, then AD user can be added in NetVault Backup server if its group is already added in user groups. When you manually add users, the privileges defined for the AD group to which the user belongs are automatically assigned. If the user has an existing local NetVault Backup account, the privileges defined for that account are taken into consideration by NetVault Backup before redefining the local user as an AD user. For more information on adding, updating, and deleting user accounts, see Creating a local user account, Modifying local user account, and Deleting local user account.However, it is not recommended for MSP and tenant administrator to add and modify users using Add User option.

 
* 
NOTE: If the Workstation attribute is set for a user in the AD database, then NetVault Backup fetches that information and stores it against the Workstation in the user details. If the user has multiple workstations, they display as separated by commas. If you want the AD user with the Workstation attribute set in AD to log in to the NetVault Backup server, then the user must specify the NetVault Backup server in the AD Workstations list. NetVault Backup supports fetching user details from AD only for Windows-based NetVault Backup servers.
1
In the Navigation pane, click Users and Groups.
2
On the Manage User and Group Accounts page, click Add User.
3
Select the user on Manage User and Group Accounts page and click Modify Details.
4
Enter the AD user name in the <domain>\<name> (For example, domain\username) or <name>@<domain> (For example, username@domain.com) format, and click Apply.

Deleting an AD user

A local NetVault Backup Administrator or an AD NetVault Backup user with administrative privileges can remove an AD user from NetVault Backup. This does not affect the user’s account in Active Directory; it only removes the user from the NetVault Database. Whereas, MSP administrator is not permitted to delete any tenant user, the tenant administrator can only delete tenant user/s.

1
In the Navigation pane, click Users and Groups.
2
On the Manage User and Group Accounts page, select the user account that you want to remove, and click Delete.
3
In the confirmation dialog box, click Delete.

Managing AD groups

The following list identifies what various users can and cannot do within NetVault Backup as it pertains to AD user groups:

•
An MSP NetVault Backup Administrator can list, update, and delete existing NetVault Backup AD groups. However, this administrator cannot list AD groups that have not been added from Active Directory.
•
An AD NetVault Backup user with administrative privileges can list, update, and delete existing NetVault Backup AD groups. This administrator can also list AD groups that have not been added from Active Directory yet and can add AD groups to NetVault Backup.
•
NetVault Backup users who do not have administrative privileges cannot perform any tasks related to AD groups in NetVault Backup.
•
While renaming NetVault Backup user to AD user all the privileges of NetVault Backup user will be assigned to new AD user along with the privileges of NetVault AD groups.
•
As stated previously, a new AD user can log in to NetVault Backup, and NetVault Backup automatically authenticates the login. If authentication succeeds, NetVault Backup assigns the user the privileges that are defined for the corresponding AD group.
 
* 
IMPORTANT: If you manually add an AD user instead of using the automated authentication process, the corresponding privileges that are defined for the user’s AD group are automatically assigned.
•
If the AD user has an existing local NetVault Backup account, all privileges from that account are assigned to the user when the account is redefined as an AD user account. The privileges defined for the corresponding AD group are also assigned to the redefined account.

An administrator can perform the following tasks in NetVault Backup:

•
Adding an AD group to NetVault Backup Server
•
Viewing a list of AD groups that exist in NetVault Backup
•
Deleting an AD group that was added to NetVault Backup

Adding an AD group to NetVault Backup Server

An AD NetVault Backup user with administrative privileges must add AD groups to the NetVault Backup Server before they can be viewed, updated, or deleted by a local NetVault Backup Administrator.

1
In the Navigation pane, click Users and Groups.
2
On the Manage User and Group Accounts page, select Groups tab, a list of existing groups added in NetVault Backup server are displayed.
3
To add an AD group to the NetVault Database, click Add Group.
If you have the Users — Administer user accounts privilege, you see a list of all available AD groups that you can add to NetVault Backup.
4
Select the applicable group, enter an optional description in the text box, and click Save Group.
Once the group is added to the NetVault Database, you can define the privileges, levels of access, and notifications for the group within NetVault Backup.
5
To update membership information, click Client and media group memberships.
On the Editing User Group Memberships page, update the applicable information.
For more information, see Configuring client and media group memberships.
6
To update privilege- and quota-based information, click Privileges and Quotas.
On the Editing Privilege and Quota Settings for User Group page, update the applicable information.
For more information, see Granting privileges and quota.
7
To update notification information, click Notification Profile.
On the Editing Notification Profile for User Group page, update the applicable information.
For more information, see Setting up notification profile.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating