vCenter permissions for new feature

[jame]

Hello,

I have update to Veeam Backup 5, but the new features like Instant Recovery, SureBackup doesn't work with the actual vCenter permission. For exemple I get the error message "Checking if vPower NFS datastore is mounted on host (Unable to mount vPower NFS volume ... permission to perform this action was denied)".
What are the vCenter permissions needed to use those new features?

[Gostev]

Hello, you should specify account that is vCenter administrator. Thanks!

[ThM]

Is giving the user the administrator role the only way? Nothing limited like in http://www.veeam.com/forums/viewtopic.php?f=2&t=1358

[Vitaliy S.]

I can play with granular permissions to see which ones are required next week. As soon as I have this information I will update the topic mentioned above. Thanks!

[jame]

I can play with granular permissions to see which ones are required next week. As soon as I have this information I will update the topic mentioned above. Thanks!

vCenter Administrator is not an limited and secure permissions for a service account.

[jame]

I think I can play with granular permissions required next week. As soon as I have this information I will update the topic mentioned above. Thanks!

Thanks for you reply. I'll wait to see those permissions.

[Gostev]

vCenter Administrator is not an limited and secure permissions for a service account.

I surely do realize that, but unfortunately at this time this is a requirement - simply because we have not had a chance to perform full testing cycle on account with limited permissons yet with v5, like we did it with v4 (this requires significant QC effort). We had already put this into our plans, and scheduled this activity for after 5.0.1 release.

[ThM]

Is there something new information on this topic?

[Gostev]

QC is working on validating the granular permissions document that Vitaly had prepared as I am writing this. So watch this space.

[tsands]

Any update on granular permissions required? What's needed for vCenter, and what is needed for the specific datastore?

[Vitaliy S.]

Tyson, as far as I know this document should be available this week.

[Vitaliy S.]

The permissions list is now available at this link, please have a look: vCenter Server Granular Permissions

[ThM]

Very nice, thanks a lot for your work.

[Tomik]

Vitaliy, do you plan to prepare vCenter Server Granular Permission document for v6?

[Vitaliy S.]

Martin, I will do my best to find enough time (later this month) to update the permissions list according to v6 functionality, but I do not expect any significant changes there. Do you see anything not working as expected in your environment?

[Pingen]

[merged]

Hi!

What is the minimum permissions i need if i running veeam backup & replication version 6.
We don´t want to let the backup & replication account to be vcneter administrator.
I tried with the same permissions that specified for version 5 http://forums.veeam.com/viewtopic.php?t=6692&p=27731
but that did´t work. I getting error like failed to read vmdk... end of file...
But when we changed to a vcenter administrator account i worked...

Regards
Thomas

[Vitaliy S.]

Hi Thomas, currently there is no list of granular permissions available for v6. Try adding "Allow virtual machine download" as it was missing (I have just added it) for some reason from the topic you've referenced in your post. Thanks!

[Tomik]

Hi Vitaliy,
adding "Allow virtual machine download" privilege to our custom vCenter role resolved our backup issue.
Thank you

[Gostev]

Hi Martin, thank you very much for taking your time to update this topic with the resolution.

[Pingen]

Thanks for the help, it worked great for me to when a added the permission "Allow virtual machine download".

[brupnick]

currently there is no list of granular permissions available for v6.

Vitaliy, is this something that will eventually be created? The v5 version was extremely helpful and an updated list for v6 would be great.

[brupnick]

I had an issue today while trying to do an Other OS FLR and found that I needed to add Virtual Machine --> Configuration --> Modify device settings.

[Vitaliy S.]

Yes, it is still on my "to-do list". Thanks for your input, I've added this permission to the original post.

[Vitaliy S.]

Here is an updated permissions list: vCenter Server Granular Permissions (v6)

Enjoy!