Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
lobo519
Expert
Posts: 297
Liked: 34 times
Joined: Sep 29, 2010 3:37 pm
Contact:

Repo Permissions

Post by lobo519 » Sep 15, 2015 7:56 pm

I am setting up Endpoint back for a few laptop users to backup to a V&R repo. My question is should I create separate repos for each user and apply permissions to each? If I just use one repo I am concerned that everyone would have access to each others backups.

Gostev
SVP, Product Management
Posts: 24662
Liked: 3475 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Repo Permissions

Post by Gostev » Sep 15, 2015 8:00 pm

Actually, no - even with a single repository, each user will only be able to access its own backups. Each endpoint backup has ownership information in its metadata that is tied to account used to connect to B&R from VEB.

lobo519
Expert
Posts: 297
Liked: 34 times
Joined: Sep 29, 2010 3:37 pm
Contact:

Re: Repo Permissions

Post by lobo519 » Sep 15, 2015 8:02 pm

perfect!

Dima P.
Product Manager
Posts: 10456
Liked: 850 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Repo Permissions

Post by Dima P. » Sep 20, 2015 6:05 pm

P.S. Don’t forget that VBR admin account (and restore operator) can see all the backups in the repository – that might be useful when performing a Bare Metal Recovery.

lobo519
Expert
Posts: 297
Liked: 34 times
Joined: Sep 29, 2010 3:37 pm
Contact:

Re: Repo Permissions

Post by lobo519 » Sep 23, 2015 8:52 pm

So i have another problem - When the user changes their password, the backup breaks without notification.

Why can't the app just use the current user permissions?? I either have to set the user on the service or in the repo wizard. Both of which break on a password reset.

Dima P.
Product Manager
Posts: 10456
Liked: 850 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Repo Permissions

Post by Dima P. » Sep 24, 2015 12:58 pm

There are two options, actually. First described in the Help Center - Specify Backup Server Settings page:
If you do not select the Specify your personal credentials check box, Veeam Endpoint Backup will connect to the backup repository using the NT AUTHORITY\SYSTEM account of the computer where the product is installed. You can use this scenario if the Veeam Endpoint computer is joined to the Active Directory domain. In this case, you can simply add the computer account (DOMAIN\COMPUTERNAME$) to an AD group and grant access rights on the backup repository to this group.
You can use Endpoint’s machine local computer account to authenticate to VBR repository but don’t forget to set up permissions same way in the repository level (add computer account to the permission list)

Another option is to have a separate service account for every endpoint machine – it’s more likely used for file share destinations, but you can keep this option in mind as well.

lobo519
Expert
Posts: 297
Liked: 34 times
Joined: Sep 29, 2010 3:37 pm
Contact:

Re: Repo Permissions

Post by lobo519 » Sep 24, 2015 2:19 pm

ahhhhhh - i missed that! Thanks!!!

Dima P.
Product Manager
Posts: 10456
Liked: 850 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Repo Permissions

Post by Dima P. » Sep 25, 2015 12:51 pm

You are welcome :)

Post Reply

Who is online

Users browsing this forum: No registered users and 22 guests