Skip to content

Commit 04d26ca

Browse files
authored
Moving the scripts located under /recipes/perl/rbac_roles to /recipes/perl/access-control for consistency (#77)
Updating README text to reflect the new script locations and content of the folder.
1 parent 2dd9a05 commit 04d26ca

4 files changed

Lines changed: 27 additions & 9 deletions

File tree

README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,15 +41,16 @@ The new RBAC allows more granular permissions, improved flexibility and greater
4141

4242
The system-defined roles shipped with NetBackup also changed from 8.1.2 to the 8.3 release. In 8.1.2, there were three system-defined roles available for RBAC configuration. In the 8.3 release, this was simplified to offer a single “Administrator” role which has all privileges for RBAC.
4343

44-
Due to the significant design shift, automatic upgrade conversion of 8.1.2 RBAC roles to the new 8.3 roles is not feasible. However, tools are available to migrate the Backup administrator role and create a new Security administrator role for the users that had the old RBAC Security administrator role. Other roles must be reconfigured manually.
44+
Due to the significant design shift, automatic upgrade conversion of 8.1.2 RBAC roles to the new 8.3 roles is not feasible. However, tools are available to migrate the Backup administrator role and create a new Security administrator role for the users that had the old RBAC Security administrator role.
45+
Other roles must be reconfigured manually.
4546
There is also a script in this repository available to generate templated NetBackup roles.
46-
See **/recipes/perl/rbac-roles/rbac_role_templates.pl**
47+
See **/recipes/perl/access-control/rbac_role_templates.pl**
4748

4849

4950
Any API keys in use prior to upgrade will still be valid, however, the underlying access granted those API keys must
5051
be reconfigured using the new RBAC configuration, after which any active user sessions must be removed.
5152
A utility script exists in this repository to help convert active API keys after upgrade to NetBackup 8.3.
5253
See **/recipes/perl/access-control/access_control_api_requests.pl**
5354

54-
Most of the API examples in this repository assume a valid JWT (Json Web Token) or API Key issued by NetBackup and do not incorporate role configuration as part of the script.
55-
However, there may be some examples which do configure RBAC as part of the script and have not yet been updated to use the RBAC design.
55+
Most of the API examples in this repository assume a valid JWT (Json Web Token) or API Key issued by NetBackup and do
56+
not incorporate role configuration as part of the script. However, there may be some examples which do configure RBAC as part of the script and have not yet been updated to use the RBAC design.
Lines changed: 22 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,8 @@
11
# NetBackup API Code Examples for Perl
22

3-
This directory contains code samples for converting RBAC principals behind registered API keys.
4-
3+
This directory contains scripts and code samples to aid in the migration of NetBackup 8.1.2
4+
roles to the new 8.3 design as well as scripts that can be used to generate typical roles using the new RBAC design.
5+
56
## Disclaimer
67

78
These scripts are only meant to be used as reference. They are not intended to be used in production environment.
@@ -13,10 +14,26 @@ These scripts are only meant to be used as reference. They are not intended to b
1314

1415
## Executing the recipes in Perl
1516

16-
Use the following command to get RBAC principals behind registered API keys, get existing roles for RBAC gen1 roles, and create new access control roles accordingly.
17+
**Examples of updating access control roles used by API Keys.**
18+
Use the following commands to get RBAC principals behind registered API keys, get existing 0roles for RBAC gen1 roles
19+
, and create new access control roles accordingly.
1720

1821
- `perl list_api_keys.pl -hostname <hostname> -username <username> -password <password> [-domain_name <domain_name>] [-domain_type <domain_type>]`
19-
2022
- `perl list_gen1_roles.pl -hostname <hostname> -username <username> -password <password> [-domain_name <domain_name>] [-domain_type <domain_type>]`
21-
2223
- `perl create_access_control_role.pl -hostname <hostname> -username <username> -password <password> -role_name <role_name> [-role_description <role_description>] [-domain_name <domain_name>] [-domain_type <domain_type>]`
24+
25+
**Examples creating roles based on role templates.**
26+
27+
- `rbac_role_templates.pl --host nbumaster.domain.com --user dennis --pass secret --domain_type unixpwd --list_templates`
28+
- `rbac_role_templates.pl --host nbumaster.domain.com --user bill --pass secret --domain_type NT --domain_name DOMAIN
29+
--create_templates`
30+
- `rbac_role_templates.pl --host nbumaster.domain.com --token Iojwei38djasdf893n-23ds --template "VMware Administrator"`
31+
- `rbac_role_templates.pl --host nbumaster.domain.com --token Iojwei38djasdf893n-23ds --template "RHV Administrator
32+
" --name "EU RHV Administrator"`
33+
34+
**Examples migrating NetBackup 8.1.2 roles to new 8.3 administrator roles.**
35+
- `rbac_user_migration.pl --host nbumaster.domain.com --user dennis --pass secret --domain_type unixpwd`
36+
- `rbac_user_migration.pl --host nbumaster.domain.com --user bill --pass secret --domain_type NT --domain_name DOMAIN`
37+
- `rbac_user_migration.pl --host nbumaster.domain.com --token Iojwei38djasdf893n-23ds`
38+
39+
File renamed without changes.
File renamed without changes.

0 commit comments

Comments
 (0)