Discussions specific to the VMware vSphere hypervisor
Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Jan 14, 2014 10:46 am

The updated document with granular permissions is now live on our website > http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

albertwt
Expert
Posts: 640
Liked: 20 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

[MERGED] VBR Service Account minimum requirement ?

Post by albertwt » Nov 10, 2014 3:07 am

Hi All,

Can anyone here please let me know or share the KB article of what is the minimum requirements to configure AD service account to be used by VBR to connect to VCenter and perform backup, restore and replication ?

Because it is now working with DOMAIN\Administrator with no issue and I need to change the domain administrator password and user account due to the security issue.

Thanks
--
/* Veeam software enthusiast user & supporter ! */

foggy
Veeam Software
Posts: 18037
Liked: 1533 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by foggy » Nov 10, 2014 8:36 am

Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist » Nov 20, 2014 8:24 pm

Should there be some updates to this for v8? I'm receiving a "Error: Invoke failed. Command: 'HotAdd.AttachDisks', parameters: {(EStringArray) vddkPaths=[vddk://<vddkConnSpec><viConn name=~=vcenter01.xyz.com~= authdPort=~=443~= vicPort=~=443~= /><vmxPath vmRef=~=vm-1888~= datacenterRef=~=datacenter-2~= datacenterInventoryPath=~=Datacenter~= snapshotRef=~=snapshot-6591~= datastoreName=~=xyz_lun01~= path=~=vm.xyz.com/vm.xyz.com.vmx~= /><vmdkPath datastoreName=~=xyz_" error when using Hot-Add mode. Giving the user full Administrator works fine. Thanks!

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Nov 20, 2014 9:09 pm

Hi Andy,

Yes, I'm planning to update this permissions list soon. As to the error message you see, hotadd mode should not have been changed. Can you confirm that it was working in v7?

Thanks!

Gostev
SVP, Product Management
Posts: 24473
Liked: 3413 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Gostev » Nov 20, 2014 9:53 pm

Vitaly, actually hot add mode was changed quite dramatically in v8, so required permissions may very well have been affected. However, this particular error is unlikely to be caused by the changes, because this operation happens before the job gets into the changed part of the code.

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist » Nov 24, 2014 2:35 pm

Unfortunately, I never tried the granular permissions in v7, so I don't know for sure. I'll just wait patiently until you publish for v8. :)

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Nov 24, 2014 3:14 pm

Andy, did you assign these permissions on the vCenter Server or you were using host, clusters and VMs instead?

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist » Nov 24, 2014 3:20 pm

I applied them at the root vCenter level.

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Nov 24, 2014 3:29 pm

Ok, thanks. I will update this document for v8 as soon as possible.

albertwt
Expert
Posts: 640
Liked: 20 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by albertwt » Dec 11, 2014 10:42 pm

foggy wrote:Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?
I'm on VBR 7
--
/* Veeam software enthusiast user & supporter ! */

veremin
Product Manager
Posts: 16710
Liked: 1396 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by veremin » Dec 11, 2014 10:44 pm 1 person likes this post

Then, the document referenced by Vitaliy should be your way to go. Thanks.

albertwt
Expert
Posts: 640
Liked: 20 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by albertwt » Dec 11, 2014 10:46 pm 1 person likes this post

v.Eremin wrote:Then, the document referenced by Vitaliy should be your way to go. Thanks.
I almost following the guide for v8

http://veeampdf.s3.amazonaws.com/guide/ ... _guide.pdf

Thanks man.
--
/* Veeam software enthusiast user & supporter ! */

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Dec 12, 2014 10:55 am

Albert, the document you've referenced is Veeam ONE deployment guide. If you need granular permissions for Veeam B&R v7, then you should use this link:
http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

vladimir.klyavin
Veeam Software
Posts: 117
Liked: 13 times
Joined: Sep 07, 2012 2:19 pm
Full Name: Vladimir Klyavin
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vladimir.klyavin » Feb 13, 2015 11:26 am

Vitaly, hi! Do we have an updated document on Veeam B&R v8 granular permissions? Or to put it the other way — has anything changed?

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Feb 15, 2015 6:34 pm

Yes, there is a couple of changes in hotadd mode, but most of the permissions are still applicable.

Brad.Morris
Enthusiast
Posts: 43
Liked: 2 times
Joined: Sep 01, 2014 10:29 pm
Full Name: Brad Morris
Location: Melbourne, Australia
Contact:

[MERGED] vCenter permissions for re-ip replica recovery

Post by Brad.Morris » Mar 12, 2015 10:46 pm

Hi all,

I am having problems working out what vCenter permissions are required for the use of Re-IP replica failover.

We have 2 environments in hosted datacentres. We have no control over the permissions of the vCenters in both Prod and DR sites. We want to be able to use replicas with re-ip failover but the current level of permissions we have in the Vcenter does not allow this. So I need to know what permissions are required for us to do this.

Thanks,
Brad.

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for re-ip replica recovery

Post by Vitaliy S. » Mar 13, 2015 10:18 am

Are you currently using our granular permissions document in your deployment?

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Mar 13, 2015 10:19 am 1 person likes this post

For all other readers - I have updated that document for Veeam B&R v8 and currently our QC team is reviewing it before we go live with it.

Brad.Morris
Enthusiast
Posts: 43
Liked: 2 times
Joined: Sep 01, 2014 10:29 pm
Full Name: Brad Morris
Location: Melbourne, Australia
Contact:

Re: vCenter permissions for re-ip replica recovery

Post by Brad.Morris » Mar 15, 2015 12:13 am

Vitaliy S. wrote:Are you currently using our granular permissions document in your deployment?
Am looking at it but not sure if it correct for B&R V8 which is what we are using.

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Mar 15, 2015 9:41 am

Re-IP requires "Guest operating system management by VIX API selected" permission selected. Also make sure you're assigning your granular permissions user on the vCenter Server, this is a requirement for vStorage API for Data Protection to work.

Vitaliy S.
Product Manager
Posts: 22777
Liked: 1526 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » Mar 20, 2015 11:49 am 1 person likes this post

The document has been verified and approved by our QC team. I'm locking this topic, so please use new one for your feedback > vCenter Server Granular Permissions (v8)

Locked

Who is online

Users browsing this forum: No registered users and 9 guests