Veeam restore permissions?

[jrbaumann]

Hello,

We are running VBR 9.5 U4 i am in the process of setting up roles for 2 separate groups, Tier 1 and Tier 2

Tier 1 should have access to all servers and have the ability to restore the entire server, files etc.

Tier 2 should only have access to 4 servers for restoration of files only.

I have setup roles and have pulled the active directory groups into VBR Enterprise with the settings above.

Here is what i am finding

* Tier 1 - can access all servers and can restore the entire server (which seems to be what i am after)

* Tier 2 - can access more than 4 servers (not sure where the restore scope is that is pulling the extra servers as i have the scope setup to only those 4 servers)

* Other random AD users can login to the VBR Enterprise dashboard....even though they are not part of the roles, but do not have the ability to see any of the servers



These are the accounts that are setup under roles -

Domain\administrator - Portal Administrator

Domain\BackupAdmin - Portal Administrator

Domain\Tier 1 - Portal Administrator

Domain\Tier 2 - Restore Operator

Domain\VeeamAdmin - Portal Administrator

BUILTIN\Administrators - Portal Administrator

NT AUTHORITY\SYSTEM - Portal Administrator

Server\Administrator - Portal Administrator


Thanks

Jeff

[Vitaliy S.]

Hi Jeff,

Just to clarify: are you using this option to set up permissions for your Tier 2 guys?

Thanks!

[jrbaumann]

Hi Vitaly!

Yes,

I have selected "selected machines only\the 4 machines i want them to access." Role = Restore Operator

I created a test AD Account, threw it in the same AD group (Tier 2) and when i login with that account, i choose pick different machine and then i see 5 other machines that i did not choose. It's like its pulling permissions from somewhere else.

Jeff

[Vitaliy S.]

Jeff,

If you specify a user manually (not within the group), do you also see this issue? BTW, does this account have admin permissions on other VMs popping up in the UI?

Thanks!