Comprehensive data protection for all workloads
Post Reply
mikeely
Veteran
Posts: 299
Liked: 103 times
Joined: Nov 07, 2016 7:39 pm
Full Name: Mike Ely
Contact:

[BUG] Impossible to create local VSA users with four-eyes enabled

Post by mikeely »

Steps to reproduce:
Have 4-eyes on
Login to host manager on the VSA
Attempt to create a local user

Expected result:
User creation wizard completes
Authorization request is created

Actual result:
Image
'If you truly love Veeam, then you should not let us do this :D' --Gostev, in a particularly Blazing Saddles moment
vnikiforov
Veeam Software
Posts: 287
Liked: 83 times
Joined: Aug 17, 2022 5:03 am
Full Name: Vladimir Nikiforov
Location: Romania
Contact:

Re: [BUG] Impossible to create local VSA users with four-eyes enabled

Post by vnikiforov »

Hello, Mike,

As of now that is by design and will be improved in upcoming versions.
Also since 13.1 the wizard pre-selects None and shows a note about this when four-eyes authorization is enabled.

The Add New User wizard in Host Management creates the local appliance user, then asks the backup server to assign the selected VBR role, which creates the user in Veeam Backup & Replication. The wizard talks to the backup server over the REST API, which cannot create approval requests, so the backup server rejects the user creation outright.

To work around it, select None at the VBR Role step so the wizard only creates the local user. Then add that user under Users & Roles > Security in the backup console. This creates an approval request for another Backup or Security Administrator to approve under Home > Pending approvals.
---
BR,
Vladimir
Veeam Software
Post Reply

Who is online

Users browsing this forum: pma, Seb.pythoud, Semrush [Bot], Spex and 150 guests