Veeam Enterprise Manager - Unauthorised Domain Access

[sunnydays]

Hi,

I noticed that domain users are able to log into the Veeam Self Service portal even if they don't have ANY permissions assigned? Obviously they cannot see any VM's but they can still log in as long as its a domain account!

We are currently running version 8.0.0.817.

Should domain users be able to authenticate without being assigned permissions?

Thanks,
Sunny

[Gostev]

Hi,

Yes, we do not restrict domain users from logging on.

Thing is, under certain circumstances, users may not see their VMs despite having the role assigned - because roles scope is a time consuming operation that is only performed periodically, so it may not complete yet at the time when the user already needs to perform the recovery. Allowing users to logon tells us who they are, and allows us to provide them a "self-service" way to trigger particular user's role scope rebuild (granularly) from within the Veeam Self Service portal. From what I remember back from designing this feature 2 years ago, you cannot see this link immediately, but it will appear as soon as they try to "pick a different VM".

In theory, this functionality should reduce your help desk load, and improves recovery times in those "corner cases".

Thanks!

[sunnydays]

Hi Anton,

Thanks for the confirmation. I just wanted to check that this was not a mis-configuration on my part and that that was the way it was designed.

Cheers,
Sunny

[veremin]

Correct, now you can be sure that you haven't misconfigured anything. Thanks.