Chat now with support
Chat with Support

NetVault 13.0.2 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors Safe Mode in NetVault

About user accounts

The NetVault MSP administrator provides privileges to user group, and the users associated with the group get those privileges. MSP administrator also assigns appropriate privileges, group memberships, and quota to the tenant accounts based on the functions the tenant users need to perform. You must also have an Active Directory (AD) environment, where you need to create AD users and must integrate with NetVault Server, and manage user groups. For more information see, Integrating Active Directory with NetVault.

 
* 
NOTE: NetVault for Managed Service Provider does not support the creation of new local user accounts.

For example, For an MSP administrator, the AD administrator creates a separate unique group in AD, and then MSP administrator adds this group and provides privileges to users of this group to perform MSP administrators role and ensures to enable secure mode to avoid any unauthorized access to NetVault Server. See, Using Secure Mode.

 
* 
IMPORTANT: It is mandatory to provide a secret password for the local administrator user in NetVault, to avoid any unauthorized access in NetVault Server. You can also disable the local admin user from NetVault.

There are three types of user accounts in NetVault for MSP:

•
MSP administrator: The administrator account for NetVault for MSP.
•
Tenant administrator: The tenant administrator account for an organization.
•
Tenant user: The tenant users of an organization, who protect authorized clients using NetVault.

About user and group privileges and presets

A privilege is a permission to perform a specific task in NetVault.

To accomplish any task in NetVault, MSP administrator must assign appropriate privileges to tenant administrator group and tenant user group. If the user group does not have the privileges, the request is denied. In NetVault, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault, see User privileges.

A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.

NetVault includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets includes the following: MSP administrator, tenant administrator, and tenant user. For more information about the privileges included in these sets, see Predefined Presets.

The MSP administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.

Role-based User and Groups privileges

 
Table 110. Role-based User and Groups privileges
Users and Groups
MSP administrator
Tenant administrator
Tenant user

Add User/Add group

X

 

 

Client and Media Group membership

X

X

 

Privileges and Quotas

X

 

 

Notification Profile

X

 

 

Configuring user details

 
To configure the user name, contact information, and other details:
1
On the Manage User Accounts and User Groups, click Modify Details.
2
Configure the following options.
 
Table 111. User details
Item
Description

Identification

Under Identification, provide the following details:

•
User Name: This detail cannot be changed.
NOTE: Do not use the @ symbol in the User Name field.
•
Real Name: In Real Name, specify the actual name of the user.

Contact Information

Under Contact Information, provide the following details:

•
Email-1: Use this box to specify the primary email addresses for the user account.
•
Email-2: Use this box to specify any additional email address for the user account.
•
Email-3: Use this box to specify any additional email address for the user account.
•
Telephone: Use this box to specify the telephone number for the user account.
•
Cellular: Use this box to specify the mobile phone number for the user account.
•
Pager: Use this box to specify the pager number for the user account.
NOTE: The email ID configured in the Email-1 box is used for email notifications if you set up a notification profile for the user account. For more information, see Setting up notification profile.

Other Details

Under Other Details, provide the following details:

•
Workstation: Use this box to specify the workstation name.
•
Description: Use this box to specify the workstation description.
•
Location: Use this box to specify the workstation location.
•
Password never expires: By default, this option is selected. To apply the password policy settings for a user account, clear this option.
NOTE: You can use the Password never expires option for the user accounts, if password for the selected user does not need to expire.
3
Click Apply to save the user details, and return to the Manage User Accounts and User Groups page.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating