The Backup, Archive, and Restore interface can be configured to allow only a user to perform certain tasks. Not all tasks can be performed successfully without some additional configuration.
The following require additional configuration and are documented elsewhere:
To authorize users for a subset of Backup, Archive, and Restore capabilities, use the following identifiers for the JBP keyword in the auth.conf file:
Allows the users to perform restore tasks from true image, archive, or regular backups plus redirected restores.
Allows the users to perform archive tasks. The capability to perform backups (BU) is required to allow archive tasks.
Allows the users to perform all actions, including server-directed restores. (Restores to a client that is different from the client that is logged into.) Server-directed restores can only be performed from a NetBackup master server.
For example, to allow a user (user1) to restore but not backup up or archive files:
user1 ADMIN=JBP JBP=ENDUSER