Setup NAS NetAPP job

[matteu]

Hello,

I have to implement file share job on different netapp. I create custom role on netapp with only required permission for ANS share (I'm on cdot mode)
I already configured all and it's working more or less. (snapshot are visible on the SVM + shares)

I use storage snapshot and add my NAS as filer. No error until here !

I would like to know what are the requirement permission on shares to be able to backup and restore ?

I try to backup :
-No permission on NTFS and full permission on SHARE -> I can backup
-full permission on NTFS and no permission on SHARE -> I can't backup

I try to restore:
-No permission on NTFS and full permission on SHARE -> I can restore
-No permission on NTFS and read permission on SHARE -> I can't restore
-full permission on NTFS and no permission on SHARE -> I can't restore


Is there a documentation about it because I don't find anything.

I would think NTFS security permission are needed and SHARE permission would be not used but this is not the case...

[HannesK]

Hello,
share permissions are required to access a share. Otherwise the whole security would be useless

For NTFS I assume that you used a user with proper permissions to back up (SeBackupPrivilege and SeRestorePrivilege)

Best regards,
Hannes

[matteu]

Hello,

My main job is on Microsoft technologies and I totally agree with you about share permission
I just ignore if when we do storage snapshot for NAS veeam access to the data with UNC path or direct access on the storage array. Now I know it's with UNC

You're totally right, I use SeBackupPrivilege and SeRestorePrivilege on the user I create to backup the share.

What is needed is :
-Read + write share permission (read for backup, write for restore)
-SeBackupPrivilege and SeRestorePrivilege to avoid modify NTFS permission

Now I understand

I need to ask my customer to be sure my backup account is on a group on the share permission tab. On this customer there are a lot of share with lot of different possibilities and they have not "all users" or user authenticated on it ^^.

Thanks for your answer

[Kitkat]

Hello,
For our NAS SMB file servers, we don’t need Windows permissions to restore, do we? Since the service account is added to the Netapp admin group and Backup group (for storage integration) Windows permission is irrelevant unless we restore using a UNC path? Is my understanding correct?
Thanks.

[HannesK]

Hello,
do the explanations from above help? If not, what problem do you see and how is your configuration?

Best regards,
Hannes