Feature Request: Add User Manager Role

[mikeely]

Trying to automate user management across multiple non-domain-joined VBR stacks using the API. The endpoints are all there, which is great, but the showstopper is that the only account level that can access that endpoint is Backup Administrator, which is WAY more scope than is needed for managing users and roles. This is compounded by the fact that the API explicitly rejects access from any account with 2FA which means to use it we'd need to create a Backup Administrator account with 2FA disabled and... it just isn't looking so great here.

I'm already hearing the objection that if you can manage users and roles you own the stack and... sure? Unless, of course, users and roles have their own permissions layer such that the sought-after User Manager role would only be able to add/remove/modify users with a listed set of roles and only be able to assign specified roles to any listed user, for example the User Manager could be assigned access to Backup Operators and Restore Operators.

I feel like this is hardly a new problem in computer science, and the inability to manage users/roles programmatically from within the Veeam stack is something that Veeam ought to be able to address with some healthy RBAC upgrades. Please tell me it's on the near-term roadmap.

[vnikiforov]

Hello, Mike,

Yes you are correct, backup admin role is needed to manage users and groups via API as well and it can't have MFA.
On the bright side, we are already working on improving that and RBAC coverage as well. Expect that in the upcoming versions, I can't provide an exact ETA, though.