vCenter Server Granular Permissions (v7)

[Vitaliy S.]

The updated document with granular permissions is now live on our website > http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

[albertwt]

Hi All,

Can anyone here please let me know or share the KB article of what is the minimum requirements to configure AD service account to be used by VBR to connect to VCenter and perform backup, restore and replication ?

Because it is now working with DOMAIN\Administrator with no issue and I need to change the domain administrator password and user account due to the security issue.

Thanks

[foggy]

Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?

[vnephologist]

Should there be some updates to this for v8? I'm receiving a "Error: Invoke failed. Command: 'HotAdd.AttachDisks', parameters: {(EStringArray) vddkPaths=[vddk://<vddkConnSpec><viConn name=~=vcenter01.xyz.com~= authdPort=~=443~= vicPort=~=443~= /><vmxPath vmRef=~=vm-1888~= datacenterRef=~=datacenter-2~= datacenterInventoryPath=~=Datacenter~= snapshotRef=~=snapshot-6591~= datastoreName=~=xyz_lun01~= path=~=vm.xyz.com/vm.xyz.com.vmx~= /><vmdkPath datastoreName=~=xyz_" error when using Hot-Add mode. Giving the user full Administrator works fine. Thanks!

[Vitaliy S.]

Hi Andy,

Yes, I'm planning to update this permissions list soon. As to the error message you see, hotadd mode should not have been changed. Can you confirm that it was working in v7?

Thanks!

[Gostev]

Vitaly, actually hot add mode was changed quite dramatically in v8, so required permissions may very well have been affected. However, this particular error is unlikely to be caused by the changes, because this operation happens before the job gets into the changed part of the code.

[vnephologist]

Unfortunately, I never tried the granular permissions in v7, so I don't know for sure. I'll just wait patiently until you publish for v8.

[Vitaliy S.]

Andy, did you assign these permissions on the vCenter Server or you were using host, clusters and VMs instead?

[vnephologist]

I applied them at the root vCenter level.

[Vitaliy S.]

Ok, thanks. I will update this document for v8 as soon as possible.

[albertwt]

Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?

I'm on VBR 7

[veremin]

Then, the document referenced by Vitaliy should be your way to go. Thanks.

[albertwt]

Then, the document referenced by Vitaliy should be your way to go. Thanks.

I almost following the guide for v8

http://veeampdf.s3.amazonaws.com/guide/ ... _guide.pdf

Thanks man.

[Vitaliy S.]

Albert, the document you've referenced is Veeam ONE deployment guide. If you need granular permissions for Veeam B&R v7, then you should use this link:
http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

[vladimir.klyavin]

Vitaly, hi! Do we have an updated document on Veeam B&R v8 granular permissions? Or to put it the other way — has anything changed?

[Vitaliy S.]

Yes, there is a couple of changes in hotadd mode, but most of the permissions are still applicable.

[Brad.Morris]

Hi all,

I am having problems working out what vCenter permissions are required for the use of Re-IP replica failover.

We have 2 environments in hosted datacentres. We have no control over the permissions of the vCenters in both Prod and DR sites. We want to be able to use replicas with re-ip failover but the current level of permissions we have in the Vcenter does not allow this. So I need to know what permissions are required for us to do this.

Thanks,
Brad.

[Vitaliy S.]

Are you currently using our granular permissions document in your deployment?

[Vitaliy S.]

For all other readers - I have updated that document for Veeam B&R v8 and currently our QC team is reviewing it before we go live with it.

[Brad.Morris]

Are you currently using our granular permissions document in your deployment?

Am looking at it but not sure if it correct for B&R V8 which is what we are using.

[Vitaliy S.]

Re-IP requires "Guest operating system management by VIX API selected" permission selected. Also make sure you're assigning your granular permissions user on the vCenter Server, this is a requirement for vStorage API for Data Protection to work.

[Vitaliy S.]

The document has been verified and approved by our QC team. I'm locking this topic, so please use new one for your feedback > vCenter Server Granular Permissions (v8)