[FEATURE REQUEST] - Veeam Enterprise Role

[CarlosEsteves]

Hello,

I would like to request a new role available in the Veeam Enterprise manager.

Today if we give to people portal administrator they are able to change every configuration.

We need to a middle term role where they can do start jobs, retry jobs, allow restore and do not have permission to change global configurations.

Thanks

[Mildur]

Hi Carlos,

Improvements are already planned, but not for Enterprise Manager.

Our current goal is to fully focus on Role-Based Access Control (RBAC) custom roles in Veeam Backup & Replication. These roles can be used in the Windows-based console or the Web UI.

Would that work for you, if we provide more granular control for job management and operations through Custom Roles? Or is there a specific use case that requires Enterprise Manager?

Best,
Fabian

[CarlosEsteves]

Hello,

I have 12 VBR in my company and operations and monitoring team uses Veeam Enterprise as a single console to check all the jobs. Today to let them re-run a failed job from Veeam Enterprise, they need to be Portal Administrator that also gives permission to manage all the configuration what is very bad.

We must have an intermediate role that give all except Configuration bottom.

Thanks

[Mildur]

Hi Carlos,

Thanks. Are you managing a single backup server or multiple ones with this Enterprise Manager?

If it is a single backup server, please consider updating to v13.1. Custom Roles are a useful feature that provides granular control over what a user can do on the backup server.
It is not yet possible to configure granular permissions for backup operator operations, such as configuring, running or retrying a backup job, but we have ideas to bring that to Custom Roles as well.

If you manage multiple backup servers, we also have plans to provide the new Web UI within a single console to the backup administrator. However, it will likely not be based on Enterprise Manager as you know it today. But even for multiple backup servers, the Veeam Backup & Replication Web UI with custom roles will play an important role going forward.

Best,
Fabian

[CarlosEsteves]

Hi,

I have 12 VBR out of domain, accessible by Delinea local account and all of them are connect to the Veeam Enterprise Manager and that is why I was mentioning about a new role in the Veeam Enterprise portal.

Btw, All VBR are running in the new version 13.1.1.18.

[Vitaliy S.]

Maybe you can try the Veeam Service Provider Console (also a free product), which can manage Veeam B&R servers and includes an operator role for the described use case.

[CarlosEsteves]

Can you share the document about this tool ?

[Mildur]

Hi Carlos,

I apologize — I thought “12 VBR” referred to a v12 backup server.

Veeam Service Provider Console is documented in our Help Center, and there is also information available on the Veeam website:

• Webpage: https://www.veeam.com/products/service- ... nsole.html
• Help Center: https://helpcenter.veeam.com/docs/vac/p ... ml?ver=9.3

I’m not sure whether you already have access through your my.veeam.com account or via download.veeam.com. If you do not currently have access, please contact your regional Veeam team and request access to Veeam Service Provider Console. It's free to use, but non-service providers don't have automatically access today.

Best,
Fabian

[CarlosEsteves]

Hi,

12 VBR means , 12 different servers in different countries, sites and regions.

Do you still think that VSPC can work as a managed single console with access to every VBR ?

[Mildur]

Yes, it can still work.

Each backup server can be connected as a hosted backup server directly to the Service Provider Console.
Alternatively, each backup server can be connected as a tenant backup server through Veeam Cloud Connect to the Service Provider Console, if the 12 locations have no direct connection to your data center.

I think it is best to reach out to our regional pre-sales team to discuss the technical requirements and request access to the software (Cloud Connect and Veeam Service Provider Console). Alternatively, you can deploy a POC and see how it works for yourself.

Best,
Fabian