Comprehensive data protection for all workloads
Post Reply
Robdigi
Enthusiast
Posts: 26
Liked: never
Joined: Nov 11, 2011 5:46 pm
Contact:

v6 Infrastructure Setup

Post by Robdigi » Dec 14, 2011 2:03 am

I have several remotes sites that each has their own ESXi server and IT admin.

I am looking into the possibility of configuring a single v6 B&R server to manage jobs, and setting up a VM at each site to act as a backup proxy/repository. The backups will be stored on each proxy server's iSCSI drive.

Can I setup Enterprise Manager to include each of these sites? If so, will the local admins have the ability to login to Enterprise Manager and run restore jobs for their individual site? In other words, are there customizable roles that will allow them access only their site's backups?

Would it be better to install a full copy of Veeam B&R at each site to achieve this level of control at the site level?

The amount of remote sites may grow to around 20. I also have to consider sending backups to the main B&R site for DR. Would this be too much for a single B&R server to manage?

How would you guys handle this situation?

Sorry for the long question.



Thanks,
Robbie

foggy
Veeam Software
Posts: 18264
Liked: 1561 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: v6 Infrastructure Setup

Post by foggy » Dec 14, 2011 9:30 am

Robbie, generally you can use the single Veeam backup server/Enterprise Manager to administer your backup infrastructure, but with the current security model you will not be able to implement the required level of control. In this case every local admin will have access to all jobs/backups/etc. To achieve that, you have to setup a separate backup server in each remote site. Please read about Enterprise Manager roles in more detail in its user guide (p.19). Thanks.

bodogb
Lurker
Posts: 1
Liked: never
Joined: Feb 08, 2012 8:39 pm
Full Name: Balazs Bodog
Contact:

Enterprise manager security / feature question

Post by bodogb » Feb 10, 2012 11:38 am

[merged]

We are a hosting company, backing up the whole infrastructure with Veeam. 1 server is handling backups, there are 2 backup jobs containing all the servers. We have Enterprise Manager installed on the same server, indexing the whole backup set. It's working like a charm. One of our clients would like to handle file level restore to his servers himself instead of writing to our support every time. Is there a way to create a limited user account for him in Enterprise manager so that he can only see backups of selected servers and he can only restore to those selected servers?

If this is not possible, are there any workarounds? Except installing multiple Veeam servers and enterprise managers, which we would like to avoid.

chjones
Expert
Posts: 106
Liked: 27 times
Joined: Oct 30, 2012 7:53 pm
Full Name: Chris Jones
Contact:

Re: v6 Infrastructure Setup

Post by chjones » Mar 05, 2013 1:51 am

Was there any progress on locking down which from which VMs (or backups) a user can restore files from?

We too have users that want to be able to restore files themselves, but if I give them the File Restore role in Veeam Enterprise Manager they can restore files from any backup from any Veeam Backup Server (we have two backup servers in different datacentres for DR to aid in the restoration of VM Replicas in the event one datacentre goes down).

I know we can limit the types of files the users can restore, but systems and the restore requirements vary, so this feature is very limiting as it is a global setting not a per user/group setting.

Also we can only allow the users to restore files directly to the original source, which is a nice feature, but it doesn't stop someone restoring heaps of data to the original source server that another user supports/manages.

Hopefully the security on self service file level restores can be improved.

Vitaliy S.
Product Manager
Posts: 22991
Liked: 1556 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: v6 Infrastructure Setup

Post by Vitaliy S. » Mar 05, 2013 9:37 am

Hi Chris,

This FR is still on the radar and our R&D team is investigating possibilities of adding this capability in our next releases.

Thanks!

Post Reply

Who is online

Users browsing this forum: PattyT and 18 guests