Discussions specific to the VMware vSphere hypervisor
Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

The updated document with granular permissions is now live on our website > http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

albertwt
Expert
Posts: 724
Liked: 25 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

[MERGED] VBR Service Account minimum requirement ?

Post by albertwt »

Hi All,

Can anyone here please let me know or share the KB article of what is the minimum requirements to configure AD service account to be used by VBR to connect to VCenter and perform backup, restore and replication ?

Because it is now working with DOMAIN\Administrator with no issue and I need to change the domain administrator password and user account due to the security issue.

Thanks
--
/* Veeam software enthusiast user & supporter ! */

foggy
Veeam Software
Posts: 20331
Liked: 1920 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by foggy »

Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist »

Should there be some updates to this for v8? I'm receiving a "Error: Invoke failed. Command: 'HotAdd.AttachDisks', parameters: {(EStringArray) vddkPaths=[vddk://<vddkConnSpec><viConn name=~=vcenter01.xyz.com~= authdPort=~=443~= vicPort=~=443~= /><vmxPath vmRef=~=vm-1888~= datacenterRef=~=datacenter-2~= datacenterInventoryPath=~=Datacenter~= snapshotRef=~=snapshot-6591~= datastoreName=~=xyz_lun01~= path=~=vm.xyz.com/vm.xyz.com.vmx~= /><vmdkPath datastoreName=~=xyz_" error when using Hot-Add mode. Giving the user full Administrator works fine. Thanks!

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Hi Andy,

Yes, I'm planning to update this permissions list soon. As to the error message you see, hotadd mode should not have been changed. Can you confirm that it was working in v7?

Thanks!

Gostev
SVP, Product Management
Posts: 28713
Liked: 5197 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Gostev »

Vitaly, actually hot add mode was changed quite dramatically in v8, so required permissions may very well have been affected. However, this particular error is unlikely to be caused by the changes, because this operation happens before the job gets into the changed part of the code.

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist »

Unfortunately, I never tried the granular permissions in v7, so I don't know for sure. I'll just wait patiently until you publish for v8. :)

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Andy, did you assign these permissions on the vCenter Server or you were using host, clusters and VMs instead?

vnephologist
Influencer
Posts: 10
Liked: 1 time
Joined: Dec 30, 2013 10:37 pm
Full Name: Andy Daniel
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vnephologist »

I applied them at the root vCenter level.

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Ok, thanks. I will update this document for v8 as soon as possible.

albertwt
Expert
Posts: 724
Liked: 25 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by albertwt »

foggy wrote:Albert, the currently available document is referred to above. Which Veeam B&R version are you currently at?
I'm on VBR 7
--
/* Veeam software enthusiast user & supporter ! */

veremin
Product Manager
Posts: 18710
Liked: 1872 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by veremin » 1 person likes this post

Then, the document referenced by Vitaliy should be your way to go. Thanks.

albertwt
Expert
Posts: 724
Liked: 25 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by albertwt » 1 person likes this post

v.Eremin wrote:Then, the document referenced by Vitaliy should be your way to go. Thanks.
I almost following the guide for v8

http://veeampdf.s3.amazonaws.com/guide/ ... _guide.pdf

Thanks man.
--
/* Veeam software enthusiast user & supporter ! */

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Albert, the document you've referenced is Veeam ONE deployment guide. If you need granular permissions for Veeam B&R v7, then you should use this link:
http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

vladimir.klyavin
Veeam Software
Posts: 118
Liked: 13 times
Joined: Sep 07, 2012 2:19 pm
Full Name: Vladimir Klyavin
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by vladimir.klyavin »

Vitaly, hi! Do we have an updated document on Veeam B&R v8 granular permissions? Or to put it the other way — has anything changed?

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Yes, there is a couple of changes in hotadd mode, but most of the permissions are still applicable.

Brad.Morris
Enthusiast
Posts: 43
Liked: 2 times
Joined: Sep 01, 2014 10:29 pm
Full Name: Brad Morris
Location: Melbourne, Australia
Contact:

[MERGED] vCenter permissions for re-ip replica recovery

Post by Brad.Morris »

Hi all,

I am having problems working out what vCenter permissions are required for the use of Re-IP replica failover.

We have 2 environments in hosted datacentres. We have no control over the permissions of the vCenters in both Prod and DR sites. We want to be able to use replicas with re-ip failover but the current level of permissions we have in the Vcenter does not allow this. So I need to know what permissions are required for us to do this.

Thanks,
Brad.

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter permissions for re-ip replica recovery

Post by Vitaliy S. »

Are you currently using our granular permissions document in your deployment?

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » 1 person likes this post

For all other readers - I have updated that document for Veeam B&R v8 and currently our QC team is reviewing it before we go live with it.

Brad.Morris
Enthusiast
Posts: 43
Liked: 2 times
Joined: Sep 01, 2014 10:29 pm
Full Name: Brad Morris
Location: Melbourne, Australia
Contact:

Re: vCenter permissions for re-ip replica recovery

Post by Brad.Morris »

Vitaliy S. wrote:Are you currently using our granular permissions document in your deployment?
Am looking at it but not sure if it correct for B&R V8 which is what we are using.

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. »

Re-IP requires "Guest operating system management by VIX API selected" permission selected. Also make sure you're assigning your granular permissions user on the vCenter Server, this is a requirement for vStorage API for Data Protection to work.

Vitaliy S.
Product Manager
Posts: 25134
Liked: 2157 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: vCenter Server Granular Permissions (v7)

Post by Vitaliy S. » 1 person likes this post

The document has been verified and approved by our QC team. I'm locking this topic, so please use new one for your feedback > vCenter Server Granular Permissions (v8)

Locked

Who is online

Users browsing this forum: No registered users and 36 guests