veeam and vcenter account

VMware specific discussions

veeam and vcenter account

Veeam Logoby SmithJohn » Mon Feb 25, 2013 3:48 am

When the veeam backup and replication connect to the vcenter server, could I make the veeam only manage part of the VMs in the vcenter.
For me, I have make a vcenter account that could only view part of the VMs, but when it connect to vcenter, all the VMs are shown.

Actually, do there any suggestion to build multi-tenant environment for veeam( want to use veeam enterprise manager as the web-protal for the end-user to manage its backup )
SmithJohn
Enthusiast
 
Posts: 47
Liked: never
Joined: Thu Jan 31, 2013 3:36 am
Full Name: charles

Re: veeam and vcenter account

Veeam Logoby Vitaliy S. » Mon Feb 25, 2013 9:53 am

Hi Charles,

Yes, you can do that. at least you can assign permissions on individual vCenter Server objects and then use the same account to connect to vCenter Server. Be aware that for every new individual view, you will need to install additional Veeam B&R console, as the vCenter Server cannot be added twice to the same console.

Here is an existing topic with the list of granular permissions required for Veeam B&R, please take a look: vCenter Server Granular Permissions (v6)

SmithJohn wrote:Actually, do there any suggestion to build multi-tenant environment for veeam( want to use veeam enterprise manager as the web-protal for the end-user to manage its backup )

Can you please elaborate this request a bit further? Do you want to allow your end-users create backup jobs for their own VMs and then manage the restore process themselves?

Thanks!
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: veeam and vcenter account

Veeam Logoby Vitaliy S. » Mon Feb 25, 2013 11:06 am

I've picked up this question from your other thread to keep similar questions in one place:
SmithJohn wrote:3)For the veeam enterprise manger (the web interface), is there any multi-tenant solution for each tenants to view their own vm only and control through the web.

Currently it is not possible, but I would appreciate if you could give us a bit more details on your existing workflows.
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: veeam and vcenter account

Veeam Logoby SmithJohn » Tue Feb 26, 2013 8:58 am

Thanks for your reply.
My case is now I delete the vcenter and add the vcenter again with limited access to part of the VMs. All the VMs are shown. I known it sounds odd but I would like to know any hints to solve it?

Could you pls evaluate the feasibility for the following solution( multi-tenant)
I am thinking to make each end user a vmware resource pool and make a dedicated vcenter account for the resource pool, then each resource pool would have a dedicated veeam backup server and a enterprise manger( in one single windows server). Then, only open the web portal ( backup server's 9080 port) to each end client.
SmithJohn
Enthusiast
 
Posts: 47
Liked: never
Joined: Thu Jan 31, 2013 3:36 am
Full Name: charles

Re: veeam and vcenter account

Veeam Logoby Vitaliy S. » Tue Feb 26, 2013 1:04 pm

SmithJohn wrote:My case is now I delete the vcenter and add the vcenter again with limited access to part of the VMs. All the VMs are shown. I known it sounds odd but I would like to know any hints to solve it?

What is the root object you've granted your account access to? Datacenter? vCenter Server?
SmithJohn wrote:Could you pls evaluate the feasibility for the following solution( multi-tenant)
I am thinking to make each end user a vmware resource pool and make a dedicated vcenter account for the resource pool, then each resource pool would have a dedicated veeam backup server and a enterprise manger( in one single windows server). Then, only open the web portal ( backup server's 9080 port) to each end client.

It should make a trick, however how are you going to have a single view across all backup servers and Enterprise Managers? Do you have Veeam ONE (part of Veeam Backup Management Suite) deployed in your VI by any chance?
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

[MERGED] Create users in Enterprise Manager for specific VM'

Veeam Logoby rubeng » Tue Mar 12, 2013 9:11 am

Hi,

I've done some research but can't seem to find anything related to my questions..

We have external partners that store their customers VM's in our Datacenter, and they manage their VM's with VPN and vSphere Client, with special permissions on their customers only.

Is there any way to customize our Veeam Backup Enterprise Manager to let them restore files or entire VM from the Enterprise Manager? Basically adding an account for the Partner to let them restore THEIR VM's and no other VM's?
rubeng
Service Provider
 
Posts: 32
Liked: never
Joined: Mon Sep 24, 2012 11:11 am
Full Name: Ruben Gilja

[MERGED] Segmenting backups based on user account

Veeam Logoby tim5700 » Wed Mar 13, 2013 4:50 pm

I have a client that is currently running VMware and Veeam 6.5. There is potential to consolidate other business units into the colo for a shared virtual and storage infrastructure. The companies are legally separated and must maintain data separation.

The question came up that if this business unit is on the same VMware, SAN and Veeam environment can users of company A be restricted from accessing backups of company B.
tim5700
Enthusiast
 
Posts: 30
Liked: 1 time
Joined: Fri Apr 17, 2009 11:31 am

Re: veeam and vcenter account

Veeam Logoby Vitaliy S. » Wed Mar 13, 2013 4:59 pm

Hi Tim,

You can achieve that by using the suggestion proposed above (separate vCenter Server accounts and Veeam backup servers).

Thanks!
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: veeam and vcenter account

Veeam Logoby c3llc » Thu Mar 14, 2013 10:12 pm

All-

Is there any hope of true multi-tenant support for Veeam v7? All of the current workarounds (granular rights management, nested ESXi, etc) have many downsides. It would be fantastic if Veeam B&R natively supported a multi-tenant environment whereby the client Veeam server simply replicated to a Veeam proxy within a hosting company's environment. The hosting company would do the configuration on their side thus shielding their infrastructure from view of the client.

Happy to discuss further, but I think this feature is long overdue - especially for the Veeam Service Providers!

=)
c3llc
Lurker
 
Posts: 1
Liked: never
Joined: Mon May 14, 2012 9:36 pm
Full Name: C3 LLC

Re: veeam and vcenter account

Veeam Logoby Gostev » Fri Mar 15, 2013 8:24 am

No plans for v7. Granular right management is pretty clean approach though.
Gostev
Veeam Software
 
Posts: 21390
Liked: 2349 times
Joined: Sun Jan 01, 2006 1:01 am
Location: Baar, Switzerland

[MERGED] Management of access rights

Veeam Logoby petitbleu » Wed Mar 27, 2013 8:42 am

Hi,
I must make the choice of a backup solution for both entities shared with each IT department.There will be a third entity that will oversee everything.
Idea in the third entity created jobs and schedule.
The other two are only supervising jobs, launches can do backups and restoration jobs but only on its (their infrastrcuture).
I'm not sure it's possible.
Bests Regards
petitbleu
Service Provider
 
Posts: 19
Liked: never
Joined: Wed Sep 02, 2009 12:23 pm
Location: Lyon
Full Name: LE COQ MANUEL

[MERGED] Architecture for multi-user and multi-department se

Veeam Logoby miha9966 » Mon Aug 26, 2013 12:23 pm

Hi,

I have a question regarding a bit complicated Veeam backup setup we have in mind...
We need to set up a centralized backup for different departments that have more-less independent infrastructure, and set it up to send a backup copy to central location.
We need to separate access to backup copies on departmental level, and leave backup job control on departmental level.
We want to use one Veeam server on central location and dedicated pair of backup proxies for each department - one on central location and one on department location (centralized licensing for all departments), but limit those departments to have rights to access only backups for their infrastructure on central location, and see backup infrastructure available only for their department.
Is it possible to achieve this with different users/roles in veeam 7? Can i have separate users controlling backups of only their piece of infrastructure, and their dedicated proxies (and their backup repositories).
Can it be achieved via Veeam Enteprise Manager, and one veeam server for multiple users and a pair of backup proxies per department?
miha9966
Novice
 
Posts: 6
Liked: never
Joined: Thu Aug 30, 2012 9:25 pm

Re: veeam and vcenter account

Veeam Logoby foggy » Mon Aug 26, 2013 1:12 pm

This can only be achieved by setting up dedicated Veeam B&R servers for each department and limiting the access to the whole infrastructure through the granular vCenter permissions. A single view across all backup servers can be provided by Veeam Enterprise Manager.
foggy
Veeam Software
 
Posts: 14742
Liked: 1080 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

[MERGED] Veeam B&R administrator roles

Veeam Logoby davide.depaoli » Fri Dec 11, 2015 3:26 pm

Hi all,
possible scenario:
multisite customer
One Veeam B&R server centralized on IT headquarter
On every remote site there is a local vSphere cluster
On every remote site there is one Veeam Proxy and local repository
On every remote site there is aguy responsible to monitor and manage only his own jobs (backup/restore).

The question is:
is possible on Veeam server setting up administrator role limited to see and manage only part of whole infrastructure ?

To semplify the explanation, seeing following screenshots:
http://s24.postimg.org/hqpqosg3p/Veeam_Add_Objects.jpg
http://s8.postimg.org/pmivwj4jp/Veeam_Cluster.jpg
http://s12.postimg.org/ox4s98xwt/Veeam_Jobs.jpg

The italian guy must to see and manage only italian cluster and jobs
The french guy must to see and manage only italian cluster and jobs
The USA guy must to see and manage only italian cluster and jobs

thank you
Davide
------------------------------
H.M.S. Sipac SpA
Veeam Gold ProPartner
davide.depaoli
Veeam ProPartner
 
Posts: 97
Liked: 16 times
Joined: Sun Oct 28, 2012 6:06 pm
Location: Santhia' (VC) - Italy
Full Name: Davide Depaoli

Re: veeam and vcenter account

Veeam Logoby foggy » Fri Dec 11, 2015 4:08 pm

Davide, please see the discussion above for some considerations. To achieve that, you would need to have a separate Veeam B&R server in every location, though.
foggy
Veeam Software
 
Posts: 14742
Liked: 1080 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson


Return to VMware vSphere



Who is online

Users browsing this forum: No registered users and 10 guests