SUMMARY:
Users placed in the "Restore Operator" Role can not see any physical agent machines or databases if we select "Selected virtual machines only" instead of "all virtual machines". This is because you can not select or see physical agent machines in BEM. This prevents us from limiting what they can see in BEM.
OUR DETAILS:
In Backup Enterpise Manager, there is no way to restrict "Restore Operators" (in our case, DBA's) to see only some VM's and physical machines with databases (Oracle or SQL). If we pick which VM's we want them to manage ("selected virtual machines only"), they can not see any of the physical agent machines with Oracle and SQL databases.
Being so, the only option is "all virtual machines" so then they can see the physical machines with databases and do testing/restores. This is not a good option because they do not need restore abilities or file access to all the other VM's (some which are sensitive). The only option we have now is to exclude them from Exchange, but everything else is available at file and restore access for them to do as they please. This is presently the only option / workaround so they could manage the databases and physical agent machines in BEM.
-
- Lurker
- Posts: 1
- Liked: never
- Joined: Sep 27, 2017 3:59 pm
- Full Name: Dane Wildey
- Contact:
-
- Product Manager
- Posts: 14720
- Liked: 1703 times
- Joined: Feb 04, 2013 2:07 pm
- Full Name: Dmitry Popov
- Location: Prague
- Contact:
Re: FEATURE REQUEST - "RESTORE OPEREATOR" role enhancement
Hello Dane,
We are aware of this behavior. Granular role management for agent restores is planned for next major Veeam B&R release. Thanks.
We are aware of this behavior. Granular role management for agent restores is planned for next major Veeam B&R release. Thanks.
Who is online
Users browsing this forum: No registered users and 34 guests