Access to pages

Roles

Bacularis is capable to limit access to pages. For example there is possible to give an user access only to specific Bacularis areas like: Job list access, Client configuration or Graphs. Is is done using the role-based access control (RBAC). It means that page access is defined in roles. These roles can be assigned to users giving them access to specific pages.

There is possible to assign user one role or many roles. Privileges each of assigned role are merged for user. It means that if there are two roles: one for accessing job pages and one for accessing storage pages, any user with both roles assigned will be able to access job and storage pages.

The roles are defined by the Bacularis administrator. There is possible to create roles with defined access to every part of the Bacularis Web.

In Bacularis are also available two pre-defined roles: Administrator and Normal user. First gives access to all Bacularis pages, the second one is customized for users that are allowed to do basic operations like: backup using the job pages and restore using the restore wizard.

Roles can be enabled/disabled. If there are users, that use a role, disabling this role will revoke all these users access to pages defined in role. It is useful if there is needed to temporarily disable access to some pages for users. To completely revoke access to some pages, better is to unassign the role from users.

../_images/bacularis_user_access_to_restricted_pages.png

Purpose

The main purpose of using restricted page access is to give selected users access only to limitted Bacularis areas. It can be very useful in case when normal non-admin users have access to Bacularis. Bacularis admin can define general roles with example names: ‘OnlyRestore’, ‘DasboardAndJobs’ or ‘BackupAndRestore’ and he can assign them to sets of users to give them possibility to restore data or start backup without access to other Bacularis areas such as: storage, pool, volumes and others.

Note

Roles gives users restricted access to pages. To give users access to selected Bacula resources like specific selected jobs, clients and others, please use the restricted Bacula resource access by Console ACL. They can be used together with the limitted access to pages. More information about it you can find in chapter Access to Bacula resources.

Page list

Below you can find descriptions for all available pages in Bacularis. Please don’t set pages marked as [deprecated] because they are old historical pages that will be removed soon.

  • AccountSettings - the logged in user account setting page (basic account params, changing password, setting 2FA …)

  • ApplicationSettings - the general application settings page (display options, enable/disable functions, audit log, health self test …)

  • ClientList - the client list page

  • ClientView - the detailed single client page (client status, start/stop/restart client, configure client, networ test …)

  • Console - [deprecated] old console page

  • ConsoleView - the Bacula console page (run bconsole commands, configure the console access …)

  • Dashboard - the main dashboard page (graphs, jobs, statistics …)

  • Deployment - the deployment page where admin can remotely install Bacularis and Bacula components

  • DeviceView - [deprecated] old device view page

  • DirectorView - the page with the director resources (status director, start/stop/restart director, configure director, status schedule …)

  • FileSetList - [deprecated] old fileset list page

  • FileSetView - [deprecated] old fileset detailed view page

  • Graphs - the page with various job graphs

  • JobList - the main job list page (restart job, bulk actions on jobs …)

  • JobView - the job details page (job graphs, configure job, configure job fileset, configure job schedule, job history, job schedules …)

  • NewBackupJobWizard - the new backup job wizard

  • NewCopyJobWizard - the new copy job wizard

  • NewMigrateJobWizard - the new migrate job wizard

  • NewResource - generic page to create Bacula config resources (all resource types). It is used to create particular resources like: new Pool, New client and others.

  • NewCloudStorageWizard - the new cloud storage wizard

  • NewFileStorageWizard - the new file storage wizard

  • NewTapeStorageWizard - the new tape storage wizard

  • NewUserWizard - the new user wizard

  • NewVerifyJobWizard - the new verify job wizard

  • Patterns - the page with configs and patterns functions

  • PoolList - the pool list page

  • PoolView - the single pool details page (update pool, update all volumes in pool, volume list in pool, configure pool …)

  • RestoreWizard - the restore wizard page

  • ScheduleList - [deprecated] old schedule list page

  • ScheduleStatusList - [deprecated] old schedule status list

  • ScheduleView - [deprecated] old detailed schedule view page

  • Security - the security page (users, roles, Console ACL, API basic users, API OAuth2 accounts, API hosts, API host groups …)

  • StorageList - the storage list page

  • StorageView- the detailed single storage view page

  • VolumeList - the volume list page

  • VolumeView - the detailed single volume page

  • WebConfigWizard - the wizard to install Bacularis web