Discussions specific to the VMware vSphere hypervisor
Post Reply
jame
Novice
Posts: 7
Liked: never
Joined: Jul 10, 2009 9:00 am
Contact:

vCenter permissions for new feature

Post by jame »

Hello,

I have update to Veeam Backup 5, but the new features like Instant Recovery, SureBackup doesn't work with the actual vCenter permission. For exemple I get the error message "Checking if vPower NFS datastore is mounted on host (Unable to mount vPower NFS volume ... permission to perform this action was denied)".
What are the vCenter permissions needed to use those new features?

Gostev
SVP, Product Management
Posts: 26682
Liked: 4268 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter permissions for new feature

Post by Gostev »

Hello, you should specify account that is vCenter administrator. Thanks!

ThM
Influencer
Posts: 10
Liked: never
Joined: Oct 27, 2010 2:36 pm
Contact:

Re: vCenter permissions for new feature

Post by ThM »

Is giving the user the administrator role the only way? Nothing limited like in http://www.veeam.com/forums/viewtopic.php?f=2&t=1358

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

I can play with granular permissions to see which ones are required next week. As soon as I have this information I will update the topic mentioned above. Thanks!

jame
Novice
Posts: 7
Liked: never
Joined: Jul 10, 2009 9:00 am
Contact:

Re: vCenter permissions for new feature

Post by jame »

Gostev wrote:I can play with granular permissions to see which ones are required next week. As soon as I have this information I will update the topic mentioned above. Thanks!
vCenter Administrator is not an limited and secure permissions for a service account.

jame
Novice
Posts: 7
Liked: never
Joined: Jul 10, 2009 9:00 am
Contact:

Re: vCenter permissions for new feature

Post by jame »

Vitaliy S. wrote:I think I can play with granular permissions required next week. As soon as I have this information I will update the topic mentioned above. Thanks!
Thanks for you reply. I'll wait to see those permissions.

Gostev
SVP, Product Management
Posts: 26682
Liked: 4268 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter permissions for new feature

Post by Gostev »

jame wrote:vCenter Administrator is not an limited and secure permissions for a service account.
I surely do realize that, but unfortunately at this time this is a requirement - simply because we have not had a chance to perform full testing cycle on account with limited permissons yet with v5, like we did it with v4 (this requires significant QC effort). We had already put this into our plans, and scheduled this activity for after 5.0.1 release.

ThM
Influencer
Posts: 10
Liked: never
Joined: Oct 27, 2010 2:36 pm
Contact:

Re: vCenter permissions for new feature

Post by ThM »

Is there something new information on this topic?

Gostev
SVP, Product Management
Posts: 26682
Liked: 4268 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter permissions for new feature

Post by Gostev »

QC is working on validating the granular permissions document that Vitaly had prepared as I am writing this. So watch this space.

tsands
Novice
Posts: 5
Liked: never
Joined: Feb 03, 2011 2:06 pm
Full Name: Tyson
Location: Florida, USA
Contact:

Re: vCenter permissions for new feature

Post by tsands »

Any update on granular permissions required? What's needed for vCenter, and what is needed for the specific datastore?

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

Tyson, as far as I know this document should be available this week.

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

The permissions list is now available at this link, please have a look: vCenter Server Granular Permissions

ThM
Influencer
Posts: 10
Liked: never
Joined: Oct 27, 2010 2:36 pm
Contact:

Re: vCenter permissions for new feature

Post by ThM »

Very nice, thanks a lot for your work. :)

Tomik
Lurker
Posts: 2
Liked: never
Joined: Mar 30, 2011 9:16 am
Full Name: Martin Tomasek
Contact:

Re: vCenter permissions for new feature

Post by Tomik »

Vitaliy, do you plan to prepare vCenter Server Granular Permission document for v6?

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

Martin, I will do my best to find enough time (later this month) to update the permissions list according to v6 functionality, but I do not expect any significant changes there. Do you see anything not working as expected in your environment?

Pingen
Lurker
Posts: 2
Liked: never
Joined: May 17, 2011 8:01 am
Contact:

Role permissions in v6

Post by Pingen »

[merged]

Hi!

What is the minimum permissions i need if i running veeam backup & replication version 6.
We don´t want to let the backup & replication account to be vcneter administrator.
I tried with the same permissions that specified for version 5 http://forums.veeam.com/viewtopic.php?t=6692&p=27731
but that did´t work. I getting error like failed to read vmdk... end of file...
But when we changed to a vcenter administrator account i worked...

Regards
Thomas

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

Hi Thomas, currently there is no list of granular permissions available for v6. Try adding "Allow virtual machine download" as it was missing (I have just added it) for some reason from the topic you've referenced in your post. Thanks!

Tomik
Lurker
Posts: 2
Liked: never
Joined: Mar 30, 2011 9:16 am
Full Name: Martin Tomasek
Contact:

Re: vCenter permissions for new feature

Post by Tomik »

Hi Vitaliy,
adding "Allow virtual machine download" privilege to our custom vCenter role resolved our backup issue.
Thank you

Gostev
SVP, Product Management
Posts: 26682
Liked: 4268 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter permissions for new feature

Post by Gostev »

Hi Martin, thank you very much for taking your time to update this topic with the resolution.

Pingen
Lurker
Posts: 2
Liked: never
Joined: May 17, 2011 8:01 am
Contact:

Re: vCenter permissions for new feature

Post by Pingen »

Thanks for the help, it worked great for me to when a added the permission "Allow virtual machine download".

brupnick
Expert
Posts: 196
Liked: 13 times
Joined: Feb 05, 2011 5:09 pm
Full Name: Brian Rupnick
Location: New York, USA
Contact:

Re: vCenter permissions for new feature

Post by brupnick »

Vitaliy S. wrote:currently there is no list of granular permissions available for v6.
Vitaliy, is this something that will eventually be created? The v5 version was extremely helpful and an updated list for v6 would be great.

brupnick
Expert
Posts: 196
Liked: 13 times
Joined: Feb 05, 2011 5:09 pm
Full Name: Brian Rupnick
Location: New York, USA
Contact:

Re: vCenter permissions for new feature

Post by brupnick »

I had an issue today while trying to do an Other OS FLR and found that I needed to add Virtual Machine --> Configuration --> Modify device settings.

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

Yes, it is still on my "to-do list". Thanks for your input, I've added this permission to the original post.

Vitaliy S.
Product Manager
Posts: 24243
Liked: 1859 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for new feature

Post by Vitaliy S. »

Here is an updated permissions list: vCenter Server Granular Permissions (v6)

Enjoy!

Post Reply

Who is online

Users browsing this forum: No registered users and 11 guests