Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Commands Reference Guide
  3. Appendix A. NetBackup Commands
  4. nbcmdrun
NetBackup™ Commands Reference Guide

Name

nbcmdrun — wrapper command that is used to run NetBackup commands with a non-root account

SYNOPSIS

nbcmdrun command_name [arguments]

nbcmdrun -listCommands

nbcmdrun -listCmdsWithGranularRbac

nbcmdrun -listPermissionsForCmd command_name [arguments]

nbcmdrun -primaryServer hostname command_name [arguments]

On UNIX systems, the directory path to this command is /usr/openv/netbackup/bin/

On Windows systems, the directory path to this command is install_path\NetBackup\bin\

DESCRIPTION

The nbcmdrun command is a wrapper used to run NetBackup commands on a NetBackup host. The NetBackup host is a primary server, a media server, or a client.

You can run the commands based on your RBAC permissions. With the NetBackup Command-Line Administrator role, you can run most of the NetBackup commands with a non-root user account.

You must enter command name without any path or extension, followed by all required and any optional arguments. You must run the nbcmdrun from a directory to which you have read and write access.

The nbcmdrun command supports granular RBAC for NetBackup policy-related commands. Use the -listCmdsWithGranularRbac option to see the list of commands that nbcmdrun supports with granular RBAC.

To use nbcmdrun, the NetBackup service user must be enabled on the host. For more information about how to enable nbcmdrun and the NetBackup service user, see the NetBackup Security and Encryption Guide.

The nbcmdrun command is not supported with NetBackup Access Control (NBAC) features.

The nbcmdrun logs are found at the location shown:

  • UNIX: /usr/openv/netbackup/logs/nbcmdrun

  • Windows: install_path\NetBackup\logs\nbcmdrun

The logs of any command nbcmdrun runs are found in their respective log directory.

For more information about the nbcmdrun functionality, see the NetBackup Security and Encryption Guide.

OPTIONS

-listCmdsWithGranularRbac

Lists NetBackup commands that can be run with granular RBAC permissions.

-listCommands

Use this option to list all commands that the nbcmdrun command supports.

-listPermissionsForCmd

Lists RBAC permissions that are required to run the given NetBackup command.

-primaryServer

Specifies NetBackup primary server on which the command should be run with granular RBAC permissions.

EXAMPLES

Example 1: Run the mklogdir command and create the bpcd directory with non-root user access using the nbcmdrun command.

nbcmdrun mklogdir -create bpcd
Creating [bpcd] with permissions [0700].
nbcmdrun: CMD EXIT STATUS = 0

Example 2: Run the vxlogcfg command with non-root user access using the nbcmdun command.

nbcmdrun vxlogcfg -l --prodid 51216 --orgid 140
Configuration settings for originator 140, of product 51216...
LogDirectory = /usr/openv/logs/
DebugLevel = 3
DiagnosticLevel = 3
DynaReloadInSec = 0
LogToStdout = False
LogToStderr = False
LogToOslog = False
RolloverMode = FileSize | LocalTime
LogRecycle = False
MaxLogFileSizeKB = 51200
RolloverPeriodInSeconds = 43200
RolloverAtLocalTime = 0:00
NumberOfLogFiles = 3
OIDNames = mmui
AppMsgLogging = ON
L10nLib = /usr/openv/lib/libvxexticu
L10nResource = mmui
L10nResourceDir = /usr/openv/resources
SyslogIdent = VRTS-NB
SyslogOpt = 0
SyslogFacility = LOG_LOCAL5
LogFilePermissions = 600
nbcmdrun: CMD EXIT STATUS = 0

Example 3: Get the RBAC permissions required to run given command with non-root user.

nbcmdrun - listPermissionsForCmd bppolicynew policy1
[
  {
    "namespace": "|PROTECTION|POLICIES|",
    "requiredOperations": "|OPERATIONS|ADD|"
  }
]

Feedback

Was this page helpful?
Previous

nbcldutil

Next

nbcomponentupdate

Feedback

Was this page helpful?