Enterprise manager : View only role

[Henrik.Grevelund]

Hi there

I am trying to find a way to allow users to se information about their backups, nothing else.
Also they should only be able to see the machines inside their scope.

Anyone found a way to do this ?

[Gostev]

vSphere Self-Service Backup Portal shows tenants "their" backups and VMs only. Thanks!

[Henrik.Grevelund]

Hi Gostev,

Thanks, but this i believe, will only cover machines which Veeam backup using guest file indexing, so Veeam can detect that they are Local administrators.
And this will give them restore rights.

This case also includes Veeam agents.

[Gostev]

No, you're thinking about another feature from the much earlier Veeam version: FLR portal that does not require maintaining access list by automatically providing everyone with Local Administrator privileges on the given VM access.

I'm talking about totally different portal with full functionality, which was added fairly recently - in 9.5 Update 4 AFAIR. This one does require delegation, but can attach to the existing vSphere permission, roles or tags system to avoid on-going access management. Did you read the link above?

[Henrik.Grevelund]

Hi Gostev,

I didn't mention all the info in my head, sorry.
This has to work for both Veeam agents and virtual machines.

Also this has to be a "View only" or "Read only" function.
With the vSphere Self-Service Backup Portal they get the possibility to create backup jobs, and restores.

This will be used to give a number of system owners the possibility to view backup job status without having the need to install the Console GUI and have it updated correctly.
These users are not vsphere users just regular system owners who would like to monitor the backup in a live window.

[Gostev]

OK, in that case there's no way to achieve this at the moment.

But if all the need is "view backup job status", can you just have them receiving backup job notification emails for "their" backup jobs? This is how different groups here at Veeam are monitoring backups of "their" servers for over 10 years now. We never even thought of complicating this with requiring them to logon into some portal instead. Everything they need is right there in their email.

[soncscy]

Hey Henrik,

I'm just really curious, what's the benefit of the live window part? Is it just that these teams are responsible for monitoring their systems' backups or just an ask from the teams?

Just during my stints in enterprise-ish companies, never really heard of such an ask before from the teams.

[Henrik.Grevelund]

Hi Harvey & Gostev

This requirement is asked from a local department which is moving the backup responsibility to the global department.
They would like be able to monitor the backup.

Sending a mail per job requires the global team to create smaller backupjobs to limit the content to each team, otherwise they will get infomation about servers they don't need know about.