Bug: Add-VBRUserRoleAssignment in V13 doesn't seem to support adding loacal or domain group.

[JasonOrchardIMNZ]

Bug: Add-VBRUserRoleAssignment in V13 doesn't seem to support adding domain or group.
https://helpcenter.veeam.com/docs/vbr/p ... tml?ver=13

Testing my lab I’ve found that this cmdlet, only worked when I used a “user name”, it didn’t work when I tried to add a local group/domain group.

When i treid to add a group either a local group or domain group it retuned the error message.

example command i entered

Add-VBRUserRoleAssignment -Name TESTGROUP -Role BackupOperator
error message

"Add-VBRUserRoleAssignment: Cannot find user with the specified name: TESTGROUP."

[david.domask]

Hi Jason,

Just to confirm, does the group already exist in the Roles and Users section or you're trying to use it to add a new user with specific roles assigned?

The cmdlet is about assigning roles to Users / Groups added, though I see that it doesn't seem to find my test group either when added already, that part let me confirm on, but can you please confirm if you're trying to add a role to an existing user / group or add a new entry in the Roles / Users section.

[JasonOrchardIMNZ]

Testing of add local group.

Select Veeam Backup and Replication PowerShell Toolkit

PowerShell 7.6.0

Code: Select all

A new PowerShell stable release is available: 7.6.1
Upgrade now, or check out the release page at:
https://aka.ms/PowerShell-Release?tag=v7.6.1

Welcome to the Veeam Backup and Replication PowerShell Toolkit!

To list available commands, type Get-VBRCommand
To open online documentation on all available commands, type Get-VBRToolkitDocumentation

© Veeam Software Group GmbH. All rights reserved.

PS C:\Users\Administrator> Get-VBRUserRoleAssignment

Role            Type   Name                 Id
----            ----   ----                 --
BackupAdmin     Group  Administrators       580df2ce-6666-4750-a7b8-b3c93a77f461
BackupOperator  User   HV-B\Administrator   e8bf9c28-3304-4ce9-99ff-4ed56fd28c66

PS C:\Users\Administrator> net localgroup testnospace

Alias name     testnospace
Comment

Members
--------------------------------------------------
The command completed successfully.

PS C:\Users\Administrator> net localgroup testnospace

Alias name     testnospace
Comment

Members
--------------------------------------------------
Administrator
The command completed successfully.

PS C:\Users\Administrator> Add-VBRUserRoleAssignment -Name testnospace -Role BackupOperator
Add-VBRUserRoleAssignment: Cannot find user with the specified name: testnospace.

PS C:\Users\Administrator> add-VBRUserRoleAssignment -Name hv-b\testnospace -Role BackupOperator
Add-VBRUserRoleAssignment: Cannot find user with the specified name: hv-b\testnospace.

PS C:\Users\Administrator> whoami
hv-b\administrator

[JasonOrchardIMNZ]

note: Ive added the same group via the VBR gui and its works just fine.

Code: Select all

PS C:\Users\Administrator> Get-VBRUserRoleAssignment

Role            Type   Name                    Id
----            ----   ----                    --
BackupAdmin     Group  BUILTIN\Administrators  580df2ce-6666-4750-a7b8-b3c93a77f461
BackupOperator  User   HV-B\Administrator      e8bf9c28-3304-4ce9-99ff-4ed56fd28c66
BackupOperator  Group  HV-B\testnospace        b4fe38fd-9c60-458c-86f1-2290085b158

PS C:\Users\Administrator>

[david.domask]

Hi Jason,

Thanks for the tests, but at this stage I'm checking internally on the intended behavior here as I can reproduce the difficulties.

(P.S. Please use the code tags for your scripts and shell output, it makes it easier to read. I've edited your posts to include code tags)

[JasonOrchardIMNZ]

Are there any updates on this bug?

[david.domask]

Hi, @JasonOrchardIMNZ,

Apologies, this indeed had fallen off my radar -- checking internally, it is indeed a bug and target release for fix is 13.1, which we expect in upcoming weeks.

[JasonOrchardIMNZ]

With the recent release of Veeam Backup & Replication v13.1, I decided to revisit and retest this behavior to determine whether it is still an issue.

Retesting results

Code: Select all

PS C:\Users\Administrator> Get-VBRUserRoleAssignment

RoleEntity : Backup Administrator
Role       : BackupAdmin
Type       : Group
Name       : BUILTIN\Administrators
Id         : 580df2ce-6666-4750-a7b8-b3c93a77f461

RoleEntity : Backup Operator
Role       : BackupOperator
Type       : User
Name       : HV-B\Administrator
Id         : e8bf9c28-3304-4ce9-99ff-4ed56fd28c66

PS C:\Users\Administrator>
PS C:\Users\Administrator> net localgroup testnospace
Alias name     testnospace
Comment

Members

-------------------------------------------------------------------------------
The command completed successfully.

PS C:\Users\Administrator> Add-VBRUserRoleAssignment -Name testnospace -Role BackupOperator

RoleEntity : Backup Operator
Role       : BackupOperator
Type       : Group
Name       : HV-B\testnospace
Id         : b61ee8c2-7b06-4410-88a5-3b31a6d69e07

PS C:\Users\Administrator> Get-VBRUserRoleAssignment

RoleEntity : Backup Operator
Role       : BackupOperator
Type       : Group
Name       : HV-B\testnospace
Id         : b61ee8c2-7b06-4410-88a5-3b31a6d69e07

RoleEntity : Backup Administrator
Role       : BackupAdmin
Type       : Group
Name       : BUILTIN\Administrators
Id         : 580df2ce-6666-4750-a7b8-b3c93a77f461

RoleEntity : Backup Operator
Role       : BackupOperator
Type       : User
Name       : HV-B\Administrator
Id         : e8bf9c28-3304-4ce9-99ff-4ed56fd28c66