Comprehensive data protection for all workloads
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Yes, this is still on our radar.
mma
Service Provider
Posts: 111
Liked: 21 times
Joined: Dec 22, 2011 9:12 am
Full Name: Marcel
Location: Lucerne, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mma »

+1 for this request
itfnb
Enthusiast
Posts: 58
Liked: 9 times
Joined: Mar 12, 2012 8:18 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by itfnb »

+1
PeterCNZ
Service Provider
Posts: 11
Liked: never
Joined: Feb 24, 2011 2:51 am
Full Name: Peter Cronwright
Contact:

Re: Veeam B&R console needs admin rights to start

Post by PeterCNZ »

+1
DanielCIS
Service Provider
Posts: 13
Liked: 3 times
Joined: Jan 28, 2015 9:52 pm
Full Name: Daniel Hadland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by DanielCIS »

+1
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

If you post "+1", then it would be highly appreciated to also elaborate on the particular use case you're after. This would help us a lot in discussing this feature for our next updates. Thanks!
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Mine (and I think most common) use case is that operator that is using vbr console does not have admin rights to that server/computer...
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Would using Enterprise Manager be a solution in your case?
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Nope.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Restore operation in B&R console requires using drivers, that cannot be enabled if you're not local admin of the computer, but thanks for your FR.
PeterCNZ
Service Provider
Posts: 11
Liked: never
Joined: Feb 24, 2011 2:51 am
Full Name: Peter Cronwright
Contact:

Re: Veeam B&R console needs admin rights to start

Post by PeterCNZ »

+1
We need non-Administrators to be able to launch the VBR Console on a Remote Desktop Server, they do not need to do the restores mostly, just Manage or Report on Backup Operations.
If restores require local administrator rights then perhaps a message can be displayed that they need to reopen VBR Console with Administration rights, or VBR Console can relaunch itself asking for Administration rights.
James_B
Novice
Posts: 3
Liked: never
Joined: Jan 15, 2018 10:48 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by James_B »

I would like to +1 this as well. As for my use case, we have a terminal server where nobody has admin rights that we would like to enable to console on. The server itself does not have anything to do with running the B&R jobs so any restore operations that would be initiated via this console f.e. would be expected to run on the main B&R server. This would also give us a chance to manage multiple installations from one terminal server. I see this topic is a bit older, but we recently discussed this with our regional rep and a technical colleague he brought onsite with him and they suggested to add my comments to this thread.
Zew
Veteran
Posts: 365
Liked: 80 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Zew »

+1 been 2 years, where's the feature? :P
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Hi Aemilianus, the architecture discussed above is still the same, but thanks for pushing! If only monitoring/reporting/basic management is required, then Enterprise Manager/Veeam ONE or Veeam Availability Console (for service providers) can help here.
mweissen13
Enthusiast
Posts: 93
Liked: 54 times
Joined: Dec 28, 2017 3:22 pm
Full Name: Michael Weissenbacher
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mweissen13 »

+1 from me
We would like to give the customer an RDP login on the B&R host where he can do restores himself. But he shouldn't have local Admin privileges as he could leverage them to stop services, delete the backups at the OS level, ...
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Michael, would using Enterprise Manager be a solution here? Initiating the restore procedure from the backup console does require local admin privileges due to working with drivers and backup mount operations.
mweissen13
Enthusiast
Posts: 93
Liked: 54 times
Joined: Dec 28, 2017 3:22 pm
Full Name: Michael Weissenbacher
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mweissen13 »

Hello Vitaly, thanks for your reply. I think Enterprise Manager would do the job. But we have many small customers with just 2-3 VMs which are backed up and installing Enterprise Manager on all of their systems sounds like a real overkill for me just to enable them being able to do restores themselves. Also we are using VAC and i heard that VAC might not play well in combination with Enterprise Manager. For the moment I think we will take the route of installing VBR Console on one Windows Client where the user has local Admin privileges.
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Michael, VAC can fully co-exist with Enterprise Manager, not sure where this rumor comes from. Moreover, VAC can monitor the health of EM installation. What kind of restores do your clients usually ask for? FLR from VMs and Agents?
Rincewind
Lurker
Posts: 1
Liked: never
Joined: Apr 19, 2018 10:49 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Rincewind »

Any updates on this feature request? A staff member of the support team told me that you need Administrator priviliges because if you do a restore the files are temporarely restored on the machine where the B&R console is installed. I can understand that you need Admin priviliges in this case though I think the more common use of the console is to check and/or start backups manually. In this case there's no need for Admin priviliges. Since it's very common (or at least it should be) that even the network/backup administrator doesn't work with Admin priviliges on his local machine (maybe he doesn't even know the credentials of the local Admin) you cannot use the B&R console to check the status/settings of your backups remotely.
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Hello, thanks for sharing your FR and use case. Right now, we recommend using Veeam ONE or Enterprise Manager (web-based) for monitoring and simple job management for the backup admin.
anton
Novice
Posts: 7
Liked: 1 time
Joined: Oct 04, 2011 7:22 am
Full Name: Anton van der Linden
Contact:

Re: Veeam B&R console needs admin rights to start

Post by anton »

+1 for me.
As soon as an engineer is local administrator on the VBR management server he can grant himself all the rights he need.
For example become an Veeam Administrator. Losing all the benefits of roles in the Veeam.
markparrett
Service Provider
Posts: 1
Liked: 1 time
Joined: Nov 21, 2016 11:43 am
Full Name: Mark Parrett

Re: Veeam B&R console needs admin rights to start

Post by markparrett » 1 person likes this post

This is a real let down in the capability of Veeam - we have dedicated staff to check backups and we dont and shouldn't have to make them a local admin on their own machine to either remote consoles to run the VBR console that would only have view only rights - our guys would need to be able to check job history to see if issues have occurred previously etc and its not that easy in Enterprise manager to see that sort of detail.
It doesn't feel like VBR scales out that well when you have large environments and hundreds of machines to check every day.
You have added Veeam view only users but you need to be a local admin to run the console - really !

Come on Veeam its time to get this feature request sorted.
aaronlinscott
Lurker
Posts: 1
Liked: 1 time
Joined: Jul 17, 2018 10:01 am
Full Name: Aaron Linscott
Contact:

Re: Veeam B&R console needs admin rights to start

Post by aaronlinscott » 1 person likes this post

+1
We have a helpdesk full of techies who check backups daily from a Citrix published app and we need them to be able to access the Veeam B&R Console without giving them local administrator on the Citrix Servers.
That would cause all sorts of havoc!
Veeam need to get this sorted ASAP, it's ridiculous and even the techies on the support team know it!
Gostev
Chief Product Officer
Posts: 31459
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Gostev »

One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.
omegagx
Enthusiast
Posts: 68
Liked: 4 times
Joined: May 09, 2017 6:33 pm
Full Name: Mike G
Contact:

Re: Veeam B&R console needs admin rights to start

Post by omegagx »

Is Update 4 scheduled to be sometime this year?
Gostev wrote:One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Yes, it is planned for this fall.
Gostev
Chief Product Officer
Posts: 31459
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Gostev »

I just don't remember if there was possibly other blockers too besides FLR - need to reincarnate the discussion about this requirement (already did).
DannyMurphy
Influencer
Posts: 17
Liked: 2 times
Joined: Nov 01, 2017 1:24 pm
Full Name: Danny Murphy
Contact:

Re: Veeam B&R console needs admin rights to start

Post by DannyMurphy »

Is there any update on whether admin rights will still be needed in v10 release this year?
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Veeam B&R 9.5 U4 coming out soon will not remove the local admin rights requirement from the console, this is planned for the later release.
George_Washington
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 10, 2017 9:10 am
Full Name: veeamuser001

Re: Veeam B&R console needs admin rights to start

Post by George_Washington »

Hello Foggy,

Any idea to when Veeam Console will be released without the need for "local admin"-privileges?

Also to everyone else, how do you guys made things work and keep it secure at the same time?
Post Reply

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], Semrush [Bot], sergiosergio and 208 guests