Access to pages¶
Roles¶
Baculum is capable to limit access to pages. For example there is possible to give an user access only to specific Baculum areas like: Job list access, Client configuration or Graphs. Is is done using the role-based access control (RBAC). It means that page access is defined in roles. These roles can be assigned to users giving them access to specific pages.
There is possible to assign user one role or many roles. Privileges each of assigned role are merged for user. It means that if there are two roles: one for accessing job pages and one for accessing storage pages, any user with both roles assigned will be able to access job and storage pages.
The roles are defined by the Baculum administrator. There is possible to create roles with defined access to every part of the Baculum Web.
In Baculum are also available two pre-defined roles: Administrator and Normal user. First gives access to all Baculum pages, the second one is customized for users that are allowed to do basic operations like: backup using the job pages and restore using the restore wizard.
Roles can be enabled/disabled. If there are users, that use a role, disabling this role will revoke all these users access to pages defined in role. It is useful if there is needed to temporarily disable access to some pages for users. To completely revoke access to some pages, better is to unassign the role from users.
Purpose¶
The main purpose of using restricted page access is to give selected users access only to limitted Baculum areas. It can be very useful in case when normal non-admin users have access to Baculum. Baculum admin can define general roles with example names: ‘OnlyRestore’, ‘DasboardAndJobs’ or ‘BackupAndRestore’ and he can assign them to sets of users to give them possibility to restore data or start backup without access to other Baculum areas such as: storage, pool, volumes and others.
Note
Roles gives users restricted access to pages. To give users access to selected Bacula resources like specific selected jobs, clients and others, please use the restricted Bacula resource access by Console ACL. They can be used together with the limitted access to pages. More information about it you can find in chapter Access to Bacula resources.
