Four-Eyes authorization cannot be unchecked

[Clymax66]

Hello guys,

We just played with the Four-Eyes authorization and checked the "Require additional approval for sensitive operations" even though we have only one Administrator (local one) configured. To our surprise VBR server allowed us to enable this function. But now we cannot disable it while it requires approval from another administrator and we have only one. Four-eyes authorization will continue to be required for sensitive operations until the request to disable it is approved. How can we disable it?

[david.domask]

Hi Clymax66, welcome to the forums.

The behavior sounds unexpected as there is a specific check to prevent this scenario:



Please open a Support Case and let Veeam Support review how this may have happened. Please be sure to include logs for Support to review. (Use the 3rd radio button to export logs from hosts, select the Veeam server itself to export from)

As for the current situation, does it work to:

1. Create new local user on the VBR server
2. Add the user to Administrators group
3. Open a new Console, and log in as the newly create user you added to Administrators (To be clear, you should have original console with your actual user, and a second console logged in as the new users)
4. Check for the approval request on the new console and approve it

[Clymax66]

Hi,

We have created the support case but as this is environment without support, we can only create case for free version which was unfortunately rejected.

As for the current situation, does it work to:

1. Create new local user on the VBR server - No we cannot create local user as it needs second admin approval and we dont have second admin
2. Add the user to Administrators group - As we cannot create new user we cannot add him to the Administrator group
3. Open a new Console, and log in as the newly create user you added to Administrators (To be clear, you should have original console with your actual user, and a second console logged in as the new users)
4. Check for the approval request on the new console and approve it

[david.domask]

Hi Clymax66,

Thank you for the update on the Support case -- indeed, Community Edition is supported on a "best-effort" basis (Sec. 4.3) depending on Support availability.

So best to go with a license that has an active support maintenance, or you can try again and let's see if Support has availability for free cases.

As for the steps, I think there is a slight confusion -- the new user I am suggesting you make should be made in Windows -- add it to the windows Administrator group, and then open a second Veeam console and try the steps.

This will work due to this consideration for Roles and Users:

Local and domain members of the Administrators group will still have full access to Veeam Backup & Replication even if you delete this group in the Users and Roles > Security settings.

So please create a new user in Windows, add it to the Administrators group, and then try the steps above.