Warning on backup of Exchange server

[Danne84]

Hi!

I have notice that i all of the sudden get this error message on my Exchange 2013 backup.

Code: Select all

SetVmCustomConfigOption failed, vmRef 'vm-679', options ['SCSI0:0.ctkEnabled':'true','SCSI0:1.ctkEnabled':'true']
Fault "NoPermissionFault", detail "<NoPermissionFault xmlns="urn:vim25" xsi:type="NoPermission" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><object type="VirtualMachine">vm-679</object><privilegeId>VirtualMachine.Config.AdvancedConfig</privilegeId></NoPermissionFault>" 
Permission to perform this operation was denied. 

And i can't remember that i have made some changes taht can cause this error.
Has anyone else seen this?

Thanks!

[Vitaliy S.]

What account are you using to connect to the vCenter Server? Administrator or account with limited (granular) permissions?

[Danne84]

I'm using a dedicated "Veeam" user account.
All the other jobs runs fine.

[veremin]

If you're using a dedicated account with specific set of permission, can you tell us whether those are specified in accordance with this list? Thanks.

[Danne84]

To test if the account was the problem i added exactly the same rights the to veeam user as the domain admin have.
And i still get this error message so it is not permissions on the account (or?)

[veremin]

We were talking more vSphere permissions, rather than domain ones. Anyway, you might want to open a ticket with support team and let them confirm your environment. Thanks.

[Vitaliy S.]

The error above can be seen when one of the granular permissions is missing. Please double-check that you have all required permissions (especially from "Virtual Machine:Configuration") assigned to the dedicated Veeam account.

[Danne84]

Ah i missunderstood on where i needed to change the permissions.
I was using the consolidated backup role in vSphere. But after reading your awnsers i created a new role with the correct permissions that i found in the PDF and after that it works!

Big thanks for all of you for the help!

[vroom]

The correct permissions ( to do everything that all veeam components can do) are:

- dvportgroup
- datacenter
- datastore
- global
- host
- network
- resource
- system
- vapp
- virtual machine



if you use less than the full veeam suite, than you can do less permisisons and will need to check the document located under the esxi section here:
https://helpcenter.veeam.com/archive/ba ... sions.html
But to get it working i used the above.

How to apply permissions in vmware server:
https://www.nakivo.com/blog/vmware-vsph ... rmissions/

Its a different way of doing it. You need to use a user/role pair and assign them to resources.
I assigned everywhere. To the datastore, to the individual VM's and to the esxi host itself. Might have been overkill but it works 100% now, no more errors. hope it helps.