NetBackup Flex Appliance – API Service Token

Key Takeaways

to simplify his Appliance management with rest API we created in Flex 5 a new type of user account called service and as the name implies this account is meant for servicing appliance service account is created by converting a regular user account the service accounts associated API token inherits the account's roles during the conversion the tokens maximum time to live must be defined once converted the web user user interface access is removed and only API login is permitted the conversion cannot be reversed the service account lends itself well for customers managing multiple appliances where user credentials are controlled by an external Authority such as active directory or Lup a typical workflow starts with a user um login next Appliance forwards user credentials to ad or Lup for Authentication if authentication is successful Appliance issues a service token with the requested time to live at this point the service token can be used for management and monitoring tasks the service token is not tracked by the appliance and it cannot be revoked however its time to Live cannot exceed or be equal to the maximum value specified at the time of service account creation generally the service token can have a TTL just long enough to execute and complete the required tasks to change a user account to service account simply select it choose convert to service account specify maximum time to live and click convert notice that the account icon changes to indicate the new service account now we are ready to generate service token by sending account credentials along with tokens time to live we can copy the service token and assign it value to flex admin service- toen variable and for example we can use it to retrieve net backup instance information we noticed that our instance with ID C ajj is still version 10.3.0 do1 so let's see if this backup version can be upgraded to 10.4.1 by running PreCheck keep in mind that net backup image 10.4.1 has been already uploaded to the appliances repository okay it looks like PreCheck is successful so we're ready to upgrade once the upgrade process is initiated Appliance will return the task ID which we use to monitor the progress checking the task status we can see that upgrade has not yet completed the task is also visible in Appliance web user interface and activity monitor panel another task status check shows the US completion and we also have an upgrade completion notification verifying the net backup instance the current version is shown with a pending status also upgrade autocommit time value is displayed this is the number of seconds left before the newly installed net backup version will be automatically committed making roll back to the previous version impossible we can let the timer expire in 24 hours or after checking that backup functions commit the new version ourselves and just like before Appliance will return the task ID the task log shows us that commit was successful rest API makes Complete Appliance Administration possible service account and Associated service stoken make the management simple secure and flexible