Repo Permissions

Backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)

Repo Permissions

Veeam Logoby lobo519 » Tue Sep 15, 2015 7:56 pm

I am setting up Endpoint back for a few laptop users to backup to a V&R repo. My question is should I create separate repos for each user and apply permissions to each? If I just use one repo I am concerned that everyone would have access to each others backups.
lobo519
Expert
 
Posts: 292
Liked: 34 times
Joined: Wed Sep 29, 2010 3:37 pm

Re: Repo Permissions

Veeam Logoby Gostev » Tue Sep 15, 2015 8:00 pm

Actually, no - even with a single repository, each user will only be able to access its own backups. Each endpoint backup has ownership information in its metadata that is tied to account used to connect to B&R from VEB.
Gostev
Veeam Software
 
Posts: 21390
Liked: 2349 times
Joined: Sun Jan 01, 2006 1:01 am
Location: Baar, Switzerland

Re: Repo Permissions

Veeam Logoby lobo519 » Tue Sep 15, 2015 8:02 pm

perfect!
lobo519
Expert
 
Posts: 292
Liked: 34 times
Joined: Wed Sep 29, 2010 3:37 pm

Re: Repo Permissions

Veeam Logoby Dima P. » Sun Sep 20, 2015 6:05 pm

P.S. Don’t forget that VBR admin account (and restore operator) can see all the backups in the repository – that might be useful when performing a Bare Metal Recovery.
Dima P.
Veeam Software
 
Posts: 6237
Liked: 439 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Repo Permissions

Veeam Logoby lobo519 » Wed Sep 23, 2015 8:52 pm

So i have another problem - When the user changes their password, the backup breaks without notification.

Why can't the app just use the current user permissions?? I either have to set the user on the service or in the repo wizard. Both of which break on a password reset.
lobo519
Expert
 
Posts: 292
Liked: 34 times
Joined: Wed Sep 29, 2010 3:37 pm

Re: Repo Permissions

Veeam Logoby Dima P. » Thu Sep 24, 2015 12:58 pm

There are two options, actually. First described in the Help Center - Specify Backup Server Settings page:
If you do not select the Specify your personal credentials check box, Veeam Endpoint Backup will connect to the backup repository using the NT AUTHORITY\SYSTEM account of the computer where the product is installed. You can use this scenario if the Veeam Endpoint computer is joined to the Active Directory domain. In this case, you can simply add the computer account (DOMAIN\COMPUTERNAME$) to an AD group and grant access rights on the backup repository to this group.

You can use Endpoint’s machine local computer account to authenticate to VBR repository but don’t forget to set up permissions same way in the repository level (add computer account to the permission list)

Another option is to have a separate service account for every endpoint machine – it’s more likely used for file share destinations, but you can keep this option in mind as well.
Dima P.
Veeam Software
 
Posts: 6237
Liked: 439 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Repo Permissions

Veeam Logoby lobo519 » Thu Sep 24, 2015 2:19 pm

ahhhhhh - i missed that! Thanks!!!
lobo519
Expert
 
Posts: 292
Liked: 34 times
Joined: Wed Sep 29, 2010 3:37 pm

Re: Repo Permissions

Veeam Logoby Dima P. » Fri Sep 25, 2015 12:51 pm

You are welcome :)
Dima P.
Veeam Software
 
Posts: 6237
Liked: 439 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov


Return to Veeam Agent for Windows



Who is online

Users browsing this forum: No registered users and 7 guests