Blocking Veeam Access to Select VMs?

[wa15]

Here is the situation:

Due to compliance reasons, we need to block some Veeam administrators' ability to restore backed up VMs. I realize we can do this through Enterprise Backup Manager, but the Veeam admins need to remain admins on the Veeam B&R console and server.

Is there anyway to do this besides spinning up an entirely new Veeam server for this workload? Is the permission structure of V10 improved so that we can do this?

[Gostev]

The problem is that you can't really reliably restrict admins from doing anything, because being backup server admins they can disable any setting, or just bypass any software-based restrictions (all that is needed is access to backups). So, any such functionality would be a pure gimmick.

[wa15]

Fair enough. Would it at least be possible to have the more advanced EBM permission structure in the VBR console? That way removing the Windows layer permission, will allow us to lock down backups in VBR? If I recall, that functionality is available in Commvault