Chat now with support
Chat with Support

NetVault 12.2 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting

About user accounts

The NetVault Backup MSP administrator provides privileges to user group, and the users associated with the group get those privileges. MSP administrator also assigns appropriate privileges, group memberships, and quota to the tenant accounts based on the functions the tenant users need to perform. You must also have an Active Directory (AD) environment, where you need to create AD users and must integrate with NetVault Backup Server, and manage user groups. For more information see, Integrating Active Directory with NetVault Backup.

For example, For an MSP administrator, the AD administrator creates a separate unique group in AD, and then MSP administrator adds this group and provides privileges to users of this group to perform MSP administrators role and ensures to enable secure mode to avoid any unauthorized access to NetVault Backup Server. See, Using Secure Mode.

 
* 
IMPORTANT: It is mandatory to provide a secret password for the local administrator user in NetVault, to avoid any unauthorized access in NetVault Backup Server. You can also disable the local admin user from NetVault.

There are three types of user accounts in NetVault Backup for MSP:

•
MSP administrator: The administrator account for NetVault Backup for MSP.
•
Tenant administrator: The tenant administrator account for an organization.
•
Tenant user: The tenant users of an organization, who protect authorized clients using NetVault Backup.

About user and group privileges and presets

A privilege is a permission to perform a specific task in NetVault Backup.

To accomplish any task in NetVault Backup, MSP administrator must assign appropriate privileges to tenant administrator group and tenant user group. If the user group does not have the privileges, the request is denied. In NetVault Backup, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault Backup, see User privileges.

A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.

NetVault Backup includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets includes the following: MSP administrator, tenant administrator, and tenant user. For more information about the privileges included in these sets, see Predefined Presets.

The MSP administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.

Role-based User and Groups privileges

 
Table 109. Role-based User and Groups privileges
Users and Groups
MSP administrator
Tenant administrator
Tenant user

Add User/Add group

X

 

 

Client and Media Group membership

X

X

 

Privileges and Quotas

X

 

 

Notification Profile

X

 

 

Configuring user details

 
To configure the user name, contact information, and other details:
1
On the Manage User Accounts and User Groups, click Modify Details.
2
Configure the following options.
 
Table 110. User details
Item
Description

Identification

Under Identification, provide the following details:

•
User Name: In User Name, type a unique name for the user account. You can assign a name based on the user group, role, or actual name.
A user name can contain alphanumeric and non-alphanumeric characters, but it cannot contain non-Latin characters. There is no length restriction, but a maximum of 20 characters is recommended on all platforms. The following characters are not supported in user names:
" / \ : ; | * ? < >^
NOTE: Do not use the @ symbol in the User Name field.
•
Real Name: In Real Name, specify the actual name of the user.

Contact Information

Under Contact Information, provide the following details:

•
Email-1: Use this box to specify the primary email addresses for the user account.
•
Email-2: Use this box to specify any additional email address for the user account.
•
Email-3: Use this box to specify any additional email address for the user account.
•
Telephone: Use this box to specify the telephone number for the user account.
•
Cellular: Use this box to specify the mobile phone number for the user account.
•
Pager: Use this box to specify the pager number for the user account.
NOTE: The email ID configured in the Email-1 box is used for email notifications if you set up a notification profile for the user account. For more information, see Setting up notification profile.

Other Details

Under Other Details, provide the following details:

•
Workstation: Use this box to specify the workstation name.
•
Description: Use this box to specify the workstation description.
•
Location: Use this box to specify the workstation location.
•
Password never expires: By default, this option is selected. To apply the password policy settings for a user account, clear this option.
NOTE: You can use the Password never expires option for the user accounts, if password for the selected user does not need to expire.
3
Click Apply to save the user details, and return to the Manage User Accounts and User Groups page.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating