Default User Groups

The permissions granted to users in each of the five default user groups correlate to the group name. Essentially, an authorization object correlates to a node in the NetBackup Administration Console tree.

The following sections describe each NetBackup default user group:

Security Administrator (NBU_Security Admin)

There are usually very few members in the NBU_Security Admin user group. The only permission that the Security Administrator possesses by default is that of configuring Access Control within Access Management. Configuring Access Control includes the following permissions:

• Ability to see the contents of Access Management in the NetBackup Administration Console
• Ability to create, modify and delete users and user groups
• Ability to assign users to user groups
• Ability to assign permissions to user groups

Administrator (NBU_Admin)

By default, members of the NBU_Admin user group have full permission to access, configure, and operate any NetBackup authorization object. In other words, members have all the capabilities that are currently available to administrators without Access Management in place. However, as members of this group, it is not necessary to log on as root or administrator at the OS level.

Operator (NBU_Operator)

The main task of the NBU_Operator user group is to monitor jobs. For example, members of the NBU_Operator user group might monitor jobs and notify a NetBackup administrator if there is a problem so the problem can be addressed by the administrator. Using the default permissions, a member of the NBU_Operator user group would probably not have enough access to be address larger problems.

Members of the NBU_Operator user group have permissions that allow them to perform some tasks such as moving tapes, operating drives, and inventorying robots.

Default User (NBU_User)

The NBU_User user group is the default NetBackup user group with the fewest permissions. Members of the NBU_User user group can only backup, restore, and archive files. NBU_User user group members have access to the functionality of the NetBackup client interface (BAR).

Vault Operator (Vault_Operator)

The Vault_Operator user group is the default user group that contains permissions to perform the operator actions necessary for the Vault process.