Hello,
I am changing the backup environment at our company and I ran into a "problem", only I don´t know if it is a problem or not.
I am working with Veeam B&R version 12.3.2.3617
We have been looking to set the roles users can perform and what they have access to in Veeam.
In my tests I had a user (local (non adminstrator) user on the server) that I set to have Backup Viewer access. According to the guide, https://helpcenter.veeam.com/docs/backu ... ml?ver=120, he should only have read-only access to the Veeam Backup & Replication Console, view a list of existing jobs and review the job session details.
I have found that the user can restore files and start backup jobs. This user seems also be able to change servers in Inventory and backup Infrastructure.
Am I misunderstanding the guide? Veeam Backup Viewer should not be able to do these things?
I have not tested other user roles but is there anything I need to do to activate the use of the roles?
I opened a case with Veeam with this as a question today with this case number: #07840866
best regards,
Ólafur
-
aQuestionmark
- Novice
- Posts: 7
- Liked: never
- Joined: Mar 27, 2019 4:31 pm
- Full Name: Ólafur Hannesson
- Contact:
-
Egor Yakovlev
- Product Manager
- Posts: 2630
- Liked: 747 times
- Joined: Jun 14, 2013 9:30 am
- Full Name: Egor Yakovlev
- Location: Prague, Czech Republic
- Contact:
Re: User Roles in Veeam
Hi Olafur.
Check local group membership lists, as that user might have been joined to some group that is listed in backup server Users & Roles that are added as "Backup Administrator" role.
By default, only local group "Administrators" is added; however, you may have added other groups to the list, and the user could be a member of one of them.
A local non-admin user assigned the "Backup Viewer" role should only be able to view objects and should not be able to interact with them.
Check local group membership lists, as that user might have been joined to some group that is listed in backup server Users & Roles that are added as "Backup Administrator" role.
By default, only local group "Administrators" is added; however, you may have added other groups to the list, and the user could be a member of one of them.
A local non-admin user assigned the "Backup Viewer" role should only be able to view objects and should not be able to interact with them.
-
aQuestionmark
- Novice
- Posts: 7
- Liked: never
- Joined: Mar 27, 2019 4:31 pm
- Full Name: Ólafur Hannesson
- Contact:
Re: User Roles in Veeam
hi,
this would make sense, however as I found out, the user was only in Users group (no other group), who are not in the any other group.
When I created another user and put him into the Backup Viewer group in Veeam, that did work as intended.
I took the decision to delete the original user and consider the matter closed, however should this come up again, I will do more through investigation and involve Veeam support in that.
This is an anomaly that I will keep an eye out for in my environment.
best regards,
Ólafur
this would make sense, however as I found out, the user was only in Users group (no other group), who are not in the any other group.
When I created another user and put him into the Backup Viewer group in Veeam, that did work as intended.
I took the decision to delete the original user and consider the matter closed, however should this come up again, I will do more through investigation and involve Veeam support in that.
This is an anomaly that I will keep an eye out for in my environment.
best regards,
Ólafur
Who is online
Users browsing this forum: chaos and 20 guests