Role permissions

[kosov.janko]

Dear all,

I'm using a combination of File Restore Operator+VM Restore Operator roles which for our use case has 1 permission too much and 1 too little.

The current state is:


Specifically I'd like to create a new role which has above, but has:
Restore -> Keep disabled (greyed out).
Quick Backup enabled (greyed out).

Looking at the DB, I can see the DB schema supports this ([Security.Roles] + [Security.RolePermissions]).

What permissionId(s) would I need to add /remove to this new role?

[veremin]

Doesn't Portal user role meet your requirements? It does not allow restoring VM, but it allows running Quick Backup for machines from the restore scope, as far as I remember. Thanks!

[kosov.janko]

Dear Vladimir,

thanks for your reply.

No Portal user provides access to all VMs as far as I can see.

So is there a way for us to achieve what I've described in first post?

Br, Blaž

[kosov.janko]

Correction to my first post:
Restore -> Keep disabled (greyed out).
Quick Backup enabled (greyed out).

Should read:
Restore -> Keep disabled (greyed out). << Need to DISABLE this permission.
Quick Backup enabled. << Need to ENABLE this permission.

[veremin]

No Portal user provides access to all VMs as far as I can see.

No, you can limit its access to specific VMs only (Restore Scope). Then, you can deleselect all restore-specific checkboxes (Entire Machine, Guest File, etc.).

This way, you will have an user that:

- Can quick backup only specific VMs
- Cannot run restore activities

Thanks!