Chat now with support
Chat with Support

NetVault 13.0.1 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors Safe Mode in NetVault

Setting authentication for Azure AD users

Before a user can use their Azure AD credentials to log in to NetVault, you must set up authentication in the Azure AD user interface using one of the following procedures.

To set authentication for Azure AD users with App registrations:
1
In the Azure AD user interface, navigate to App registrations.
2
Select NetVault as the application that you registered.
3
Navigate to Authentication.
4
Under Implicit Grant, select Access tokens and ID tokens.
5
Click Save.
To set authentication for Azure AD users with App registrations:
1
In the Azure AD user interface, navigate to App registrations.
2
Select NetVault as the application that you registered.
3
Click Manifest.
4
Set “oauth2AllowImplicitFlow” and “oauth2AllowImplicitFlow” to true.
5
Click Save.

Restricting an application to a set of users

Azure AD lets you restrict access to applications to specific sets of users or security groups. To view the procedure for enabling the app to enable user assignments, search the Microsoft Azure Active Directory documentation. If the user assignment requirement is set to Yes, you must assign the Azure AD users to the application in the Azure portal before they can log in to NetVault.

To assign a user to NetVault in the Azure portal:
1
Navigate to Enterprise applications.
2
Select NetVault as the application that you registered.
3
Under Users and groups, click Add user.
4
Select the appropriate user.
5
Click Assign.

Configuring Azure AD in NetVault

To configure Azure AD in NetVault:
1
Log in to the NetVault Server as an administrator.
2
From the Navigation pane in the NetVault WebUI, click Change Settings.
3
On the NetVault Server Settings page, under User management, click Identity Provider.
4
In the Identity Provider window, enter the Application ID and Directory ID.
 
* 
NOTE: To retrieve the Directory ID for the application, see the Azure AD properties.
5
Click Apply.

Managing an Azure AD user

The following list identifies what various users can and cannot do within NetVault as it pertains to Azure AD:

•
When an Azure AD user logs in using Sign In with Azure AD, NetVault authenticates the login against Azure Active Directory. This behavior lets an Azure AD user log in to NetVault without needing a local NetVault account.
•
If authentication succeeds and this is the first time that the user is logging in, NetVault takes one of the following actions:
•
If a corresponding Azure AD group exists in NetVault, NetVault adds the user and assigns the user the privileges, access levels, and notification settings that are defined for the corresponding Azure AD group.
•
If the user does not have a NetVault account, NetVault adds the user but excludes all privileges, access levels, and notification settings. When the local NetVault administrator logs in, the administrator can view the Azure AD user entry and assign the applicable privileges.
•
NetVault automatically fetches the respective user details from the domain controller and stores them locally in the NetVault Database. When in secure mode, NetVault fetches the details from the domain controller and overwrites them in the NetVault Database on every successful login.
•
If authentication fails, NetVault displays an error message and prevents the user from logging in.
•
All NetVault administrators can view all local, AD, and Azure AD NetVault users.
•
An Azure AD NetVault user with administrative privileges can add authenticated Azure AD users; a local NetVault administrator cannot.
•
An Azure AD NetVault user with administrative privileges can rename an existing local NetVault user to an authenticated Azure AD NetVault user; a local NetVault administrator cannot.
 
* 
NOTE: To maintain the integrity of the user’s Azure AD password, ensure that the password field remains empty.
•
After you add the Azure AD user in NetVault, you cannot rename the user to any other user name.
•
No one can change the password of an Azure AD user or set the password to use the Password never expires option.
•
A local, AD, or Azure AD NetVault user with administrative privileges can change user-based information that is accessed by using the Modify Details option as this information is stored in the NetVault Database. However, if the secure mode is enabled, the NetVault administrator and other users are allowed to edit or change only E-mail 2 and E-mail 3 of an Azure AD NetVault user.

The following procedures detail ways of managing a Microsoft Azure Active Directory (Azure AD) user account.

•
Adding an Azure AD user
•
Deleting an AD user
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating