PAM (Privileged Access Management) Integration

[mogan2055847]

Hello all,

We're implementing PAM (Privileged Access Management) solution in our environment. How is the integration with Veeam?

Any recommendation or recourses is highly appreciated.

Thank you in advance.

[mogan2055847]

Hello all,

Any comments for anyone? Or it is no integration with Veeam 12.1 at the moment?

[eeberg]

Hi Mogansundram,

We do not have integrations currently. It would be helpful if you could provide a few details:

1. Which solution are you implementing?
2. Specific requirements, objectives, compliance standards?

Thanks

[ftravinsky]

AFAIK, the only solid RBAC model Veeam able to provide is web-based Backup Enterprise Manager, which might or not support SSO and other authorization perks.

[chrisdearden]

Which tools are you looking to deploy?

[ajtucker]

It will depend on the PAM solution and what you want to protect with it. For example I did some work with Osirium PAM, and they support the Veeam administrator console natively without any integrations being done on the Veeam side (They use credential injection and JIT Elevation).

If you wanted Veeam to query the PAM each time it needed to authenticate to something (rather than storing credentials using the Credential Manager), that would probably need to be a feature request as I don't believe Veeam can do this at the moment.

If you are looking to better protect the encryption keys for your backups, if you have a Key Management Server that implements KMIP you can use Veeam with that. This isn't really a PAM, but does achieve something similar in that it it is able to get the private key for encrypted backups off the Veeam server onto your KMIP server and presumably stored somewhere safe like an HSM.