立即与支持人员聊天
与支持团队交流

NetVault 13.0.3 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors Safe Mode in NetVault

Managing user and group accounts

•
About user accounts
•
About user and group privileges and presets
•
Setting a user policy
•
Using Secure Mode
•
Using Presets
•
User privileges
•
Predefined Presets
•
Integrating Active Directory with NetVault
•
Using Azure Active Directory as an identity provider

About user accounts

The NetVault MSP administrator provides privileges to user group, and the users associated with the group get those privileges. MSP administrator also assigns appropriate privileges, group memberships, and quota to the tenant accounts based on the functions the tenant users need to perform. You must also have an Active Directory (AD) environment, where you need to create AD users and must integrate with NetVault Server, and manage user groups. For more information see, Integrating Active Directory with NetVault.

 
* 
NOTE: NetVault for Managed Service Provider does not support the creation of new local user accounts.

For example, For an MSP administrator, the AD administrator creates a separate unique group in AD, and then MSP administrator adds this group and provides privileges to users of this group to perform MSP administrators role and ensures to enable secure mode to avoid any unauthorized access to NetVault Server. See, Using Secure Mode.

 
* 
IMPORTANT: It is mandatory to provide a secret password for the local administrator user in NetVault, to avoid any unauthorized access in NetVault Server. You can also disable the local admin user from NetVault.

There are three types of user accounts in NetVault for MSP:

•
MSP administrator: The administrator account for NetVault for MSP.
•
Tenant administrator: The tenant administrator account for an organization.
•
Tenant user: The tenant users of an organization, who protect authorized clients using NetVault.

About user and group privileges and presets

A privilege is a permission to perform a specific task in NetVault.

To accomplish any task in NetVault, MSP administrator must assign appropriate privileges to tenant administrator group and tenant user group. If the user group does not have the privileges, the request is denied. In NetVault, the Auditor Daemon (nvavp) authorizes the user requests based on the privileges granted to the user or user groups. For information about the types of user and user group privileges in NetVault, see User privileges.

A Preset is a set of user privileges. Presets facilitate the task of assigning user privileges. Instead of assigning the individual privileges to each user account, the administrator can assign a Preset. When a Preset is assigned to a user, the user gets all the permissions included in that set.

NetVault includes several predefined Presets, which contain all the necessary privileges for specific user roles and user groups. The predefined Presets includes the following: MSP administrator, tenant administrator, and tenant user. For more information about the privileges included in these sets, see Predefined Presets.

The MSP administrator can also create user-defined presets for any additional user roles that are required in the backup environment. For more information, see Using Presets.

Role-based User and Groups privileges

 
Table 110. Role-based User and Groups privileges
Users and Groups
MSP administrator
Tenant administrator
Tenant user

Add User/Add group

X

 

 

Client and Media Group membership

X

X

 

Privileges and Quotas

X

 

 

Notification Profile

X

 

 

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级