VEEAM Backup Replication Roles (feature request)

Availability for the Always-On Enterprise

VEEAM Backup Replication Roles (feature request)

Veeam Logoby mattk0 » Mon Mar 20, 2017 4:15 pm

I'd like to request some additional roles be added to the VEEAM Backup and Replication Console. Currently the only roles available are (per https://helpcenter.veeam.com/docs/backu ... tml?ver=95)
- Restore Operator (can perform restores)
- Backup Viewer (Read-only access to view jobs)
- Backup Operator (Can start/stop existing jobs)
- Administrator (full access)

I'd like to propose having another role for a Backup Creator/Editor of someone who can create and edit backup jobs but yet doesn't have rights to do deletions from the 'files' or change configuration backup, or other administrative VEEAM settings.

Does anyone know if this is possible or agree with some more granularity needed for these roles? Thanks,
mattk0
Novice
 
Posts: 4
Liked: never
Joined: Thu Nov 14, 2013 5:38 pm
Full Name: Matt Klein

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby v.Eremin » Mon Mar 20, 2017 4:22 pm

I'd like to propose having another role for a Backup Creator/Editor of someone who can create and edit backup jobs but yet doesn't have rights to do deletions from the 'files' or change configuration backup, or other administrative VEEAM settings.

Someone having rights to edit job settings would be automatically able to "delete" backups by shortening retention and executing new backup cycle, wouldn't he?
v.Eremin
Product Manager
 
Posts: 12400
Liked: 892 times
Joined: Fri Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby Vitaliy S. » Mon Mar 20, 2017 4:24 pm

Hi Matt,

That's not possible today, but can you please elaborate a bit more on your use case? Do you provide backup as a service internally or you're an MSP?

Thanks!
Vitaliy S.
Product Manager
 
Posts: 19015
Liked: 1047 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby mattk0 » Mon Mar 20, 2017 4:29 pm

v.Eremin wrote:Someone having rights to edit job settings would be automatically able to "delete" backups by shortening retention and executing new backup cycle, wouldn't he?


Interesting - I hadn't thought of that.

Our use case is just trying to prevent a rogue/accidental admin from going into the files from a backup copy or standard job and deleting data but still being allowed to do standard administrative details such as creating jobs and adding VM's to existing jobs. I'm guessing it's too detailed to ask that an admin be able to modify just retention of existing jobs or create new ones....
mattk0
Novice
 
Posts: 4
Liked: never
Joined: Thu Nov 14, 2013 5:38 pm
Full Name: Matt Klein

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby Vitaliy S. » Mon Mar 20, 2017 5:25 pm

If you're worried about backup being deleted, then why not to offload it to archival media or any device not connected to Veeam B&R? This would protect you not only from the rogue admin, but also from different malware (cryptolockers etc.)
Vitaliy S.
Product Manager
 
Posts: 19015
Liked: 1047 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby mattk0 » Mon Mar 20, 2017 6:06 pm

We're using Exagrid for our primary and backup/DR site - I was told this wasn't possible to offload it to ExaGrid seperate from VEEAM B&R
mattk0
Novice
 
Posts: 4
Liked: never
Joined: Thu Nov 14, 2013 5:38 pm
Full Name: Matt Klein

Re: VEEAM Backup Replication Roles (feature request)

Veeam Logoby Vitaliy S. » Mon Mar 20, 2017 7:02 pm

Well, you can definitely access ExaGrid device manually, right? Here is a similar topic that might be useful > New ransomware that targets backups. Are we susceptible?
Vitaliy S.
Product Manager
 
Posts: 19015
Liked: 1047 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: dellock6, MSNbot Media, tdewin and 73 guests