Restricting Veeam Access to specific business unit

[mbroaders]

We are looking at implementing Veeam O365 on a large tenant that contains multiple business units. Is it possible to restrict Veeam O365's access to specific user mailboxes and Sharepoint Sites or must it have permission across the entire environment?

[Mike Resseler]

The VBO service must have permissions across the entire environment. Are we looking at restores or backup? Or both? Because in v6 we will have a portal with RBAC possibilities for restore

[mbroaders]

I suppose we are looking at restores as the risk is that data from a different business unit could be recovered. Will the RBAC features allow for restrictions on what accounts can be recovered or will it just cover restore operations as a whole?