Add domain users to non domain Veeam server

[keith Drayton]

Hi All

Recently carried out a server refresh and this time we have kept the Veeam server as a work group member rather than adding to the Domain.
What i am now stuck with is adding users to Veeam, The local server account is fine and backup jobs are running fine,
I want to add a couple domain users to give them access to some backups how ever it will only allow me to select users from the local server or workgroup,
Is this possible? am i missing something simple? I have spent a lot of time searching nad had no luck,

Thank You

[Andreas Neufert]

Correct, Veeam Backup & Replication and Enterprise Manager only work with the specific domain added to the Backup & Replication/Enterprise Manager Server.

Have you looked into our Self Services? Then it would make sense to add only the Enterprise Manager (seperate VM) to the Domain and use the users defined in the domain to allow them to do self restore. As well it is possible in Update 4 to use vCenter defined access for Backup job management. You can allow a specific vCenter user group (and other seletable scopes) to create Jobs/manage jobs/create restores for their individual VMs where they have rights in vcenter.

[keith Drayton]

Hello Andreas

Am i right in saying Self Services is only available in Enterprise Plus? - Thought i read that this morning, We have Enterprise.

Is there an ETA for Update 4 ? That may be the way to go

Thank You

[bdufour]

the idea with the workgroup server, is to separate veeam from the domain. say a domain account is compromised - the veeam server will be protected. so trying to add domain users to that server defeats that purpose.

i personally dont like the workgroup design, but it has its place. MFA on AD/Domain accounts is a better solution imo. also, when a server or pc isnt joined to a domain, you will not be using kerberos for auth, you will be using ntlm exclusively.

[keith Drayton]

I have set up a new Veeam user which is fine but as we do not have Plus i am unable to restrict VM access for the user,
Assuming it is not restricted to Plus users i will have to wait for Update 4 and vCenter defined access.

Thanks