Restricting user access
NetBackup and NetBackup appliances support local users and remote users from Active Directory and LDAP user domains, who you can add as individual users or as user groups. As a best practice, you should only add those users or groups who need access to the system and restrict access from those who do not.
Note:
When you connect a remote user domain to a Flex Appliance application instance, all users on the domain can log in to the instance. You must perform additional steps to restrict access to specific users or groups. For details, see the topics "Connecting an Active Directory user domain to a primary or a media server instance" and "Connecting an LDAP user domain to a primary or a media server instance" in the NetBackup Application Guide.