Service permissions

Table: Service permissions shows the permissions that are associated with the Service authorization object.

Table: Service permissions

Set	Activity	NBU_Operator	NBU_Admin	NBU_SAN Admin	NBU_User	NBU_Security Admin	Vault_Operator	NBU_ KMS Admin
Browse	Browse	X	X	---	---	---	X	---
Read	Read	X	X	---	---	---	X	---
Operate	Stop	X	X	---	---	---	---	---

The Read and Browse permissions do not have an effect on the Services/Daemons tab. This information is harvested from the server using user level calls. The calls are used to access the process task list and is displayed to all users for informational purposes.

If a user is not a member of the NBU_Admin user group, but is logged on as an OS administrator (Administrator or root), then:

The user is able to restart a service from within the NetBackup Administration Console or from the command line.
The user is able to stop a service from within the NetBackup Administration Console but not from the command line.

If a user is not a member of the NBU_Admin user group, but is logged on as an OS administrator (root). That user is able to restart a daemon from the command line only:

	/etc/init.d/netbackup start

If a user is a member of the NBU_Admin user group, but is not logged on as an OS administrator (Administrator), then:

The user is not able to restart a service from within the NetBackup Administration Console or from the command line.
The user is not able to stop a service from within the NetBackup Administration Console but the user can use the command line.

(For example, bprdreq -terminate, bpdbm -terminate, or stopltid.)

If a user is a member of the NBU_Admin user group, but is not logged on as an OS administrator (root). That user is not able to restart a daemon from the NetBackup Administration Console or from the command line.