Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. IT Analytics Help
  5. Section VII. Data Collector Installation and Configuration for Cohesity NetBackup
  7. Appendix A. Configure Appliances
  9. Configure NetBackup Flex Appliances for Data Collection

Configure NetBackup Flex Appliances for Data Collection

To configure NetBackup Flex Appliances for data collection, you must first create a new user account on the Flex primary server and grant sudo access to the user account in /etc/sudoers.d and /mnt/nbdata/vxos/etc/sudoers.d, as described in the procedure below. You must also obtain the REST API key from the NetBackup UI.

  1. Open a SSH session to the NetBackup instance as an admin or root user to create an appadmin user.
  2. Create a local user account:
    sudo useradd <username> 
sudo passwd <username>
  3. Grant sudo access to the local user account created above in /etc/sudoers.d:

    • Create sudoers file in /etc/sudoers.d, substituting the name of the user you created for <username>.

      sudo visudo -f /etc/sudoers.d/<username>

    • Add these permissions in the interactive editor.

      To allows unrestricted access to all the permissions:

      Defaults:<username> !requiretty
<username> ALL=(ALL) NOPASSWD: \
/usr/openv/netbackup/bin/admincmd/* ,\
/usr/openv/volmgr/bin/* ,\
/usr/openv/netbackup/bin/*

      Or to further restrict access to NetBackup administrative commands, use the following:

      Defaults:<username> !requiretty 
<username> ALL=(ALL) NOPASSWD: /usr/openv/netbackup/bin/admincmd/bpgetconfig ,\ 
/usr/openv/netbackup/bin/admincmd/bpcoverage ,\ 
/usr/openv/netbackup/bin/admincmd/bpdbjobs ,\ 
/usr/openv/netbackup/bin/admincmd/bpimagelist ,\ 
/usr/openv/netbackup/bin/admincmd/bperror ,\
/usr/openv/netbackup/bin/admincmd/bpminlicense ,\ 
/usr/openv/netbackup/bin/admincmd/bppllist ,\ 
/usr/openv/netbackup/bin/admincmd/bpretlevel ,\ 
/usr/openv/netbackup/bin/admincmd/bpplclients ,\ 
/usr/openv/netbackup/bin/admincmd/bpmedialist ,\ 
/usr/openv/netbackup/bin/admincmd/bpstulist ,\ 
/usr/openv/netbackup/bin/admincmd/nbdevquery ,\ 
/usr/openv/netbackup/bin/admincmd/nbauditreport ,\ 
/usr/openv/netbackup/bin/admincmd/nbstl ,\ 
/usr/openv/netbackup/bin/admincmd/nbstlutil ,\ 
/usr/openv/netbackup/bin/admincmd/bpstsinfo ,\ 
/usr/openv/volmgr/bin/vmquery ,\ 
/usr/openv/volmgr/bin/vmpool ,\ 
/usr/openv/volmgr/bin/vmglob ,\ 
/usr/openv/volmgr/bin/vmcheckxxx ,\ 
/usr/openv/volmgr/bin/vmoprcmd ,\ 
/usr/openv/volmgr/bin/tpconfig ,\ 
/usr/openv/netbackup/bin/bplist ,\ 
/usr/openv/netbackup/bin/nbsqladm ,\ 
/usr/openv/netbackup/bin/nboraadm

    • Save and exit the interactive editor.

  4. Grant sudo access to the local user account created above in /mnt/nbdata/vxos/etc/sudoers.d:

    • Create sudoers file in /mnt/nbdata/vxos/etc/sudoers.d.

      sudo visudo -f  /mnt/nbdata/vxos/etc/sudoers.d/<username>

    • Add these permissions in the interactive editor.

      To allows unrestricted access to all the permissions:

      Defaults:<username> !requiretty
<username> ALL=(ALL) NOPASSWD: \
/usr/openv/netbackup/bin/admincmd/* ,\
/usr/openv/volmgr/bin/* ,\
/usr/openv/netbackup/bin/*

      Or to further restrict access to NetBackup administrative commands, use the following:

      Defaults:<username> !requiretty 
<username> ALL=(ALL) NOPASSWD: /usr/openv/netbackup/bin/admincmd/bpgetconfig ,\ 
/usr/openv/netbackup/bin/admincmd/bpcoverage ,\ 
/usr/openv/netbackup/bin/admincmd/bpdbjobs ,\ 
/usr/openv/netbackup/bin/admincmd/bpimagelist ,\ 
/usr/openv/netbackup/bin/admincmd/bperror ,\ 
/usr/openv/netbackup/bin/admincmd/bpminlicense ,\
/usr/openv/netbackup/bin/admincmd/bppllist ,\ 
/usr/openv/netbackup/bin/admincmd/bpretlevel ,\ 
/usr/openv/netbackup/bin/admincmd/bpplclients ,\ 
/usr/openv/netbackup/bin/admincmd/bpmedialist ,\ 
/usr/openv/netbackup/bin/admincmd/bpstulist ,\ 
/usr/openv/netbackup/bin/admincmd/nbdevquery ,\ 
/usr/openv/netbackup/bin/admincmd/nbauditreport ,\ 
/usr/openv/netbackup/bin/admincmd/nbstl ,\ 
/usr/openv/netbackup/bin/admincmd/nbstlutil ,\ 
/usr/openv/netbackup/bin/admincmd/bpstsinfo ,\ 
/usr/openv/volmgr/bin/vmquery ,\ 
/usr/openv/volmgr/bin/vmpool ,\ 
/usr/openv/volmgr/bin/vmglob ,\ 
/usr/openv/volmgr/bin/vmcheckxxx ,\ 
/usr/openv/volmgr/bin/vmoprcmd ,\ 
/usr/openv/volmgr/bin/tpconfig ,\ 
/usr/openv/netbackup/bin/bplist ,\ 
/usr/openv/netbackup/bin/nbsqladm ,\ 
/usr/openv/netbackup/bin/nboraadm

    • Save and exit the interactive editor.

  5. Obtain the REST API key from the NetBackup UI and copy it in the API key field. The API key field appears on Add Backup Server or Edit Backup Server popup that is displayed when you click Add or Edit on the Veritas NetBackup Data Collector Policy window.

Feedback

Was this page helpful?
Previous

Configure NetBackup Appliances for Data Collection

Next

Appendix B. Firewall configuration: Default ports

Feedback

Was this page helpful?