Service authorization object permissions

Article:HOWTO46952  |  Created: 2011-03-24  |  Updated: 2011-03-25  |  Article URL http://www.symantec.com/docs/HOWTO46952
Article Type
How To


Environment

Subject


Service authorization object permissions

The following table shows the permissions that are associated with the Service authorization object.

Table: Service authorization object permissions

Set

Activity

NBU_Operator

NBU_Admin

NBU_SAN Admin

NBU_User

NBU_Security Admin

Vault_Operator

NBU_ KMS Admin

Browse

Browse

X

X

---

---

---

X

---

Read

Read

X

X

---

---

---

X

---

Operate

Stop

X

X

---

---

---

---

---

The Read and Browse permissions do not have an effect on the Services/Daemons tab. This information is harvested from the server using user level calls. The calls are used to access the process task list and is displayed to all users for informational purposes.

If a user is not a member of the NBU_Admin user group, but is logged on as an OS administrator (Administrator or root), then:

  • The user is able to restart a service from within the NetBackup Administration Console or from the command line.

  • The user is able to stop a service from within the NetBackup Administration Console but not from the command line.

If a user is not a member of the NBU_Admin user group, but is logged on as an OS administrator (root). That user is able to restart a daemon from the command line only:

    /etc/init.d/netbackup start

If a user is a member of the NBU_Admin user group, but is not logged on as an OS administrator (Administrator), then:

  • The user is not able to restart a service from within the NetBackup Administration Console or from the command line.

  • The user is not able to stop a service from within the NetBackup Administration Console but the user can use the command line.

    (For example, bprdreq -terminate, bpdbm -terminate, or stopltid.)

If a user is a member of the NBU_Admin user group, but is not logged on as an OS administrator (root). That user is not able to restart a daemon from the NetBackup Administration Console or from the command line.

See About using NetBackup Access Control (NBAC)

See Authorization objects


Legacy ID



v32157873_v54411808


Article URL http://www.symantec.com/docs/HOWTO46952


Terms of use for this information are found in Legal Notices