Self-Service File Restore Portal

[asgard79]

Hello,
I need some explanation about this feature.
I'd like to delegate restore operation only to few agents.
My Veeam servers are in workgroup.
My agents are in Active Directory Domain.

If I understand, on each OS with agent, I must have a local account in local administrator group. In Veeam Backup console, I create user with "Restore Operator" role. How can link the local OS account to local Veeam account ?
Is it possible to use Self Service File Restore portal with this configuration ?

Thanks a lot.

Of course, if other configuration exist, please tell me what ^^

[jorgedlcruz]

Hello,
Enterprise Manager will help you with this request.

You need to create scopes from the Enterprise Manager https://helpcenter.veeam.com/docs/backu ... ml?ver=110. On those scopes, you can either add users, or a group of users, from an AD if your Enterprise Manager is on the AD already, or you can add your own SAML provider, etc.

That scope will include as well the Servers you want to give them access to, and it can be Veeam Agents for Windows/Linux as well. I am not sure if you are protecting VMs, doing Veeam Agents Jobs, or File Shares, but anyways, you can give granular access and allow, deny, restore in place, etc.

Give the documentation a read, and more importantly, give the functionality a try. It is pretty simple.

Best regards

[asgard79]

Nice, after posted my post, I had view Enterprise manager capabilities

[jorgedlcruz]

Very nice. I am using it every day, and the Customers I speak to about it, really like it, and use it as described, creating scopes, different users/groups, to other VMs, Agents, with less or more privileges.

A piece of advice, please enable this as soon as you can, and point it to a Security Distribution List so that you can thank yourself later:
https://helpcenter.veeam.com/docs/backu ... ml?ver=110

Cheers!

[asgard79]

Okay.
I've created as you described scope.
We must wait next backup to show what I've choosen ?
Refresh list is empty. So I do refresh scope without success

[jorgedlcruz]

Hello,
On the same page where you are creating the scopes, you have on the top a button that says rebuild scope. For example, this is my new, freshly created scope:

I've pressed to rebuild the scope, and under Sessions, I can see that the new scope to that server has now been built:

And now, if I log in with that user, on my case user001, and select the Server, fileserver, VM, etc. I will see already points, and I can navigate and will be able to restore with more or less privilege according to the scope:


Try that, I think you are close to having it working.

Thanks

[asgard79]

I've something wrong in my configuration.
I do exactly what you show me, but when I connect with my user, I don't see any servers.

[jorgedlcruz]

Under Pick from the list, you have nothing? After the rebuild scope and all?

That is very strange; I would recommend then opening a support ticket and moving it from there.

Would you mind sharing a screenshot similar to mine with the scope? Or send it by DM, remove any detail on the domain, VM name, etc.

Thanks!

[asgard79]

Problem have been resolved by support. VM were protected by Veeam agent where as Portal was configured to show only virtual machine (so without agent).
If it can help somebody .