Chat now with support
Chat with Support

NetVault 12.4 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting
Common errors Safe Mode in NetVault Backup

Managing user and group accounts

•
About user accounts
•
About user and group privileges and presets
•
Setting a user policy
•
Using Secure Mode
•
Using Presets
•
User privileges
•
Predefined Presets
•
Integrating Active Directory with NetVault Backup
•
Using Azure Active Directory as an identity provider

About user accounts

The NetVault Backup MSP administrator provides privileges to user group, and the users associated with the group get those privileges. MSP administrator also assigns appropriate privileges, group memberships, and quota to the tenant accounts based on the functions the tenant users need to perform. You must also have an Active Directory (AD) environment, where you need to create AD users and must integrate with NetVault Backup Server, and manage user groups. For more information see, Integrating Active Directory with NetVault Backup.

 
* 
NOTE: NetVault Backup for Managed Service Provider does not support the creation of new local user accounts.

For example, For an MSP administrator, the AD administrator creates a separate unique group in AD, and then MSP administrator adds this group and provides privileges to users of this group to perform MSP administrators role and ensures to enable secure mode to avoid any unauthorized access to NetVault Backup Server. See, Using Secure Mode.

 
* 
IMPORTANT: It is mandatory to provide a secret password for the local administrator user in NetVault, to avoid any unauthorized access in NetVault Backup Server. You can also disable the local admin user from NetVault.

There are three types of user accounts in NetVault Backup for MSP:

•
MSP administrator: The administrator account for NetVault Backup for MSP.
•
Tenant administrator: The tenant administrator account for an organization.
•
Tenant user: The tenant users of an organization, who protect authorized clients using NetVault Backup.

About user and group privileges and presets

A privilege is a permission to perform a specific task in NetVault Backup.

To accomplish any task in NetVault Backup, MSP administrator must assign appropriate privileges to tenant administrator group and tenant user group. If the user group does not have the privileges, the request is denied. In NetVault Backup, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault Backup, see User privileges.

A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.

NetVault Backup includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets includes the following: MSP administrator, tenant administrator, and tenant user. For more information about the privileges included in these sets, see Predefined Presets.

The MSP administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.

Role-based User and Groups privileges

 
Table 110. Role-based User and Groups privileges
Users and Groups
MSP administrator
Tenant administrator
Tenant user

Add User/Add group

X

 

 

Client and Media Group membership

X

X

 

Privileges and Quotas

X

 

 

Notification Profile

X

 

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating