Veeam B&R console needs admin rights to start

[Vitaliy S.]

Yes, this is still on our radar.

[mma]

+1 for this request

[itfnb]

+1

[PeterCNZ]

+1

[DanielCIS]

+1

[Vitaliy S.]

If you post "+1", then it would be highly appreciated to also elaborate on the particular use case you're after. This would help us a lot in discussing this feature for our next updates. Thanks!

[hyvokar]

Mine (and I think most common) use case is that operator that is using vbr console does not have admin rights to that server/computer...

[Vitaliy S.]

Would using Enterprise Manager be a solution in your case?

[hyvokar]

Nope.

[Vitaliy S.]

Restore operation in B&R console requires using drivers, that cannot be enabled if you're not local admin of the computer, but thanks for your FR.

[PeterCNZ]

+1
We need non-Administrators to be able to launch the VBR Console on a Remote Desktop Server, they do not need to do the restores mostly, just Manage or Report on Backup Operations.
If restores require local administrator rights then perhaps a message can be displayed that they need to reopen VBR Console with Administration rights, or VBR Console can relaunch itself asking for Administration rights.

[James_B]

I would like to +1 this as well. As for my use case, we have a terminal server where nobody has admin rights that we would like to enable to console on. The server itself does not have anything to do with running the B&R jobs so any restore operations that would be initiated via this console f.e. would be expected to run on the main B&R server. This would also give us a chance to manage multiple installations from one terminal server. I see this topic is a bit older, but we recently discussed this with our regional rep and a technical colleague he brought onsite with him and they suggested to add my comments to this thread.

[Zew]

+1 been 2 years, where's the feature?

[Vitaliy S.]

Hi Aemilianus, the architecture discussed above is still the same, but thanks for pushing! If only monitoring/reporting/basic management is required, then Enterprise Manager/Veeam ONE or Veeam Availability Console (for service providers) can help here.

[mweissen13]

+1 from me
We would like to give the customer an RDP login on the B&R host where he can do restores himself. But he shouldn't have local Admin privileges as he could leverage them to stop services, delete the backups at the OS level, ...

[Vitaliy S.]

Michael, would using Enterprise Manager be a solution here? Initiating the restore procedure from the backup console does require local admin privileges due to working with drivers and backup mount operations.

[mweissen13]

Hello Vitaly, thanks for your reply. I think Enterprise Manager would do the job. But we have many small customers with just 2-3 VMs which are backed up and installing Enterprise Manager on all of their systems sounds like a real overkill for me just to enable them being able to do restores themselves. Also we are using VAC and i heard that VAC might not play well in combination with Enterprise Manager. For the moment I think we will take the route of installing VBR Console on one Windows Client where the user has local Admin privileges.

[Vitaliy S.]

Michael, VAC can fully co-exist with Enterprise Manager, not sure where this rumor comes from. Moreover, VAC can monitor the health of EM installation. What kind of restores do your clients usually ask for? FLR from VMs and Agents?

[Rincewind]

Any updates on this feature request? A staff member of the support team told me that you need Administrator priviliges because if you do a restore the files are temporarely restored on the machine where the B&R console is installed. I can understand that you need Admin priviliges in this case though I think the more common use of the console is to check and/or start backups manually. In this case there's no need for Admin priviliges. Since it's very common (or at least it should be) that even the network/backup administrator doesn't work with Admin priviliges on his local machine (maybe he doesn't even know the credentials of the local Admin) you cannot use the B&R console to check the status/settings of your backups remotely.

[Vitaliy S.]

Hello, thanks for sharing your FR and use case. Right now, we recommend using Veeam ONE or Enterprise Manager (web-based) for monitoring and simple job management for the backup admin.

[anton]

+1 for me.
As soon as an engineer is local administrator on the VBR management server he can grant himself all the rights he need.
For example become an Veeam Administrator. Losing all the benefits of roles in the Veeam.

[markparrett]

This is a real let down in the capability of Veeam - we have dedicated staff to check backups and we dont and shouldn't have to make them a local admin on their own machine to either remote consoles to run the VBR console that would only have view only rights - our guys would need to be able to check job history to see if issues have occurred previously etc and its not that easy in Enterprise manager to see that sort of detail.
It doesn't feel like VBR scales out that well when you have large environments and hundreds of machines to check every day.
You have added Veeam view only users but you need to be a local admin to run the console - really !

Come on Veeam its time to get this feature request sorted.

[aaronlinscott]

+1
We have a helpdesk full of techies who check backups daily from a Citrix published app and we need them to be able to access the Veeam B&R Console without giving them local administrator on the Citrix Servers.
That would cause all sorts of havoc!
Veeam need to get this sorted ASAP, it's ridiculous and even the techies on the support team know it!

[Gostev]

One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.

[omegagx]

Is Update 4 scheduled to be sometime this year?

One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.

[foggy]

Yes, it is planned for this fall.

[Gostev]

I just don't remember if there was possibly other blockers too besides FLR - need to reincarnate the discussion about this requirement (already did).

[DannyMurphy]

Is there any update on whether admin rights will still be needed in v10 release this year?

[foggy]

Veeam B&R 9.5 U4 coming out soon will not remove the local admin rights requirement from the console, this is planned for the later release.

[George_Washington]

Hello Foggy,

Any idea to when Veeam Console will be released without the need for "local admin"-privileges?

Also to everyone else, how do you guys made things work and keep it secure at the same time?