minimal permissions for SQL Failover Cluster 2022+ changed to SysAdmin?

[sabicao]

Hi, all.

We've always used a minimal permissions user for our SQL backups as per this page:

https://helpcenter.veeam.com/docs/vbr/u ... tml?ver=13

This worked fine (still does) with image based backup of VMs containing SQL servers and its databases.

However, these least permissions policy we go by is preventing us from backing up through Application Backup Policy (Microsoft SQL Server) off an SQL Failover Cluster Instance. The same permissions we've always used proved insufficient, returning " user does not have permission to run DBCC PAGE. Failed to execute query. Failed to retrieve differential backup size from query result. Failed to estimate differential backup size. Failed to estimate backup size for database XXXXX"

Veeam ONE goes one step further and states "Error: [Microsoft][ODBC Driver 17 for SQL Server][SQL Server]The login has insufficient authority. Membership of the sysadmin role is required to use VIRTUAL_DEVICE with BACKUP or RESTORE"

I do hope this is not true.

Please clarify if SysAdmin is the only way to go.

[david.domask]

Hi sabicao,

Yes, the MSSQL plugin has different permission requirements as outlined in the User Guide.

Image level backups (VM / Agent backups) use VSS to handle the quiescing and backing up of the databases, but the plugins use VDI and sysadmin is required for using VIRTUAL_DEVICE for backup & restore operations.