Discussions specific to the VMware vSphere hypervisor
Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Mar 30, 2017 10:03 am

Yes, this is still on our radar.

mma
Service Provider
Posts: 98
Liked: 18 times
Joined: Dec 22, 2011 9:12 am
Full Name: Marcel
Location: Lucerne, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mma » Jul 14, 2017 11:58 am

+1 for this request

itfnb
Enthusiast
Posts: 58
Liked: 9 times
Joined: Mar 12, 2012 8:18 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by itfnb » Jul 14, 2017 3:15 pm

+1

PeterCNZ
Service Provider
Posts: 11
Liked: never
Joined: Feb 24, 2011 2:51 am
Full Name: Peter Cronwright
Contact:

Re: Veeam B&R console needs admin rights to start

Post by PeterCNZ » Aug 22, 2017 4:00 am

+1

DanielCIS
Service Provider
Posts: 8
Liked: 1 time
Joined: Jan 28, 2015 9:52 pm
Full Name: Daniel Hadland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by DanielCIS » Oct 30, 2017 10:46 pm

+1

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Oct 31, 2017 12:39 pm

If you post "+1", then it would be highly appreciated to also elaborate on the particular use case you're after. This would help us a lot in discussing this feature for our next updates. Thanks!

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar » Nov 06, 2017 7:54 am

Mine (and I think most common) use case is that operator that is using vbr console does not have admin rights to that server/computer...
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Nov 06, 2017 6:30 pm

Would using Enterprise Manager be a solution in your case?

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar » Nov 08, 2017 7:19 am

Nope.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Nov 11, 2017 7:27 pm

Restore operation in B&R console requires using drivers, that cannot be enabled if you're not local admin of the computer, but thanks for your FR.

PeterCNZ
Service Provider
Posts: 11
Liked: never
Joined: Feb 24, 2011 2:51 am
Full Name: Peter Cronwright
Contact:

Re: Veeam B&R console needs admin rights to start

Post by PeterCNZ » Nov 13, 2017 4:18 am

+1
We need non-Administrators to be able to launch the VBR Console on a Remote Desktop Server, they do not need to do the restores mostly, just Manage or Report on Backup Operations.
If restores require local administrator rights then perhaps a message can be displayed that they need to reopen VBR Console with Administration rights, or VBR Console can relaunch itself asking for Administration rights.

James_B
Novice
Posts: 3
Liked: never
Joined: Jan 15, 2018 10:48 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by James_B » Feb 14, 2018 2:54 pm

I would like to +1 this as well. As for my use case, we have a terminal server where nobody has admin rights that we would like to enable to console on. The server itself does not have anything to do with running the B&R jobs so any restore operations that would be initiated via this console f.e. would be expected to run on the main B&R server. This would also give us a chance to manage multiple installations from one terminal server. I see this topic is a bit older, but we recently discussed this with our regional rep and a technical colleague he brought onsite with him and they suggested to add my comments to this thread.

Zew
Expert
Posts: 214
Liked: 42 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Zew » Feb 14, 2018 10:24 pm

+1 been 2 years, where's the feature? :P

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Feb 15, 2018 11:21 am

Hi Aemilianus, the architecture discussed above is still the same, but thanks for pushing! If only monitoring/reporting/basic management is required, then Enterprise Manager/Veeam ONE or Veeam Availability Console (for service providers) can help here.

mweissen13
Service Provider
Posts: 42
Liked: 16 times
Joined: Dec 28, 2017 3:22 pm
Full Name: Michael Weissenbacher
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mweissen13 » Feb 20, 2018 11:25 am

+1 from me
We would like to give the customer an RDP login on the B&R host where he can do restores himself. But he shouldn't have local Admin privileges as he could leverage them to stop services, delete the backups at the OS level, ...

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Feb 20, 2018 5:43 pm

Michael, would using Enterprise Manager be a solution here? Initiating the restore procedure from the backup console does require local admin privileges due to working with drivers and backup mount operations.

mweissen13
Service Provider
Posts: 42
Liked: 16 times
Joined: Dec 28, 2017 3:22 pm
Full Name: Michael Weissenbacher
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mweissen13 » Feb 26, 2018 8:42 am

Hello Vitaly, thanks for your reply. I think Enterprise Manager would do the job. But we have many small customers with just 2-3 VMs which are backed up and installing Enterprise Manager on all of their systems sounds like a real overkill for me just to enable them being able to do restores themselves. Also we are using VAC and i heard that VAC might not play well in combination with Enterprise Manager. For the moment I think we will take the route of installing VBR Console on one Windows Client where the user has local Admin privileges.

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Mar 13, 2018 2:06 pm

Michael, VAC can fully co-exist with Enterprise Manager, not sure where this rumor comes from. Moreover, VAC can monitor the health of EM installation. What kind of restores do your clients usually ask for? FLR from VMs and Agents?

Rincewind
Lurker
Posts: 1
Liked: never
Joined: Apr 19, 2018 10:49 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Rincewind » Apr 19, 2018 11:02 am

Any updates on this feature request? A staff member of the support team told me that you need Administrator priviliges because if you do a restore the files are temporarely restored on the machine where the B&R console is installed. I can understand that you need Admin priviliges in this case though I think the more common use of the console is to check and/or start backups manually. In this case there's no need for Admin priviliges. Since it's very common (or at least it should be) that even the network/backup administrator doesn't work with Admin priviliges on his local machine (maybe he doesn't even know the credentials of the local Admin) you cannot use the B&R console to check the status/settings of your backups remotely.

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Apr 20, 2018 2:17 pm

Hello, thanks for sharing your FR and use case. Right now, we recommend using Veeam ONE or Enterprise Manager (web-based) for monitoring and simple job management for the backup admin.

anton
Novice
Posts: 5
Liked: 1 time
Joined: Oct 04, 2011 7:22 am
Full Name: Anton van der Linden
Contact:

Re: Veeam B&R console needs admin rights to start

Post by anton » May 11, 2018 2:54 pm

+1 for me.
As soon as an engineer is local administrator on the VBR management server he can grant himself all the rights he need.
For example become an Veeam Administrator. Losing all the benefits of roles in the Veeam.

markparrett
Service Provider
Posts: 1
Liked: 1 time
Joined: Nov 21, 2016 11:43 am
Full Name: Mark Parrett

Re: Veeam B&R console needs admin rights to start

Post by markparrett » May 29, 2018 8:49 am 1 person likes this post

This is a real let down in the capability of Veeam - we have dedicated staff to check backups and we dont and shouldn't have to make them a local admin on their own machine to either remote consoles to run the VBR console that would only have view only rights - our guys would need to be able to check job history to see if issues have occurred previously etc and its not that easy in Enterprise manager to see that sort of detail.
It doesn't feel like VBR scales out that well when you have large environments and hundreds of machines to check every day.
You have added Veeam view only users but you need to be a local admin to run the console - really !

Come on Veeam its time to get this feature request sorted.

aaronlinscott
Lurker
Posts: 1
Liked: 1 time
Joined: Jul 17, 2018 10:01 am
Full Name: Aaron Linscott
Contact:

Re: Veeam B&R console needs admin rights to start

Post by aaronlinscott » Jul 17, 2018 10:06 am 1 person likes this post

+1
We have a helpdesk full of techies who check backups daily from a Citrix published app and we need them to be able to access the Veeam B&R Console without giving them local administrator on the Citrix Servers.
That would cause all sorts of havoc!
Veeam need to get this sorted ASAP, it's ridiculous and even the techies on the support team know it!

Gostev
SVP, Product Management
Posts: 24803
Liked: 3563 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Gostev » Jul 17, 2018 11:43 am

One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.

omegagx
Enthusiast
Posts: 57
Liked: 3 times
Joined: May 09, 2017 6:33 pm
Full Name: Michael Gorn
Contact:

Re: Veeam B&R console needs admin rights to start

Post by omegagx » Jul 17, 2018 4:30 pm

Is Update 4 scheduled to be sometime this year?
Gostev wrote:One big reason was file level recovery, which needed local admin permissions to mount backup locally. This particular requirement should be removed in Update 4 due to slightly changed FLR architecture, potentially allowing us to remove the requirement in question.

foggy
Veeam Software
Posts: 18278
Liked: 1564 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy » Jul 17, 2018 4:36 pm

Yes, it is planned for this fall.

Gostev
SVP, Product Management
Posts: 24803
Liked: 3563 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Gostev » Jul 17, 2018 5:48 pm

I just don't remember if there was possibly other blockers too besides FLR - need to reincarnate the discussion about this requirement (already did).

DannyMurphy
Influencer
Posts: 15
Liked: 2 times
Joined: Nov 01, 2017 1:24 pm
Full Name: Danny Murphy
Contact:

Re: Veeam B&R console needs admin rights to start

Post by DannyMurphy » Oct 23, 2018 10:30 am

Is there any update on whether admin rights will still be needed in v10 release this year?

foggy
Veeam Software
Posts: 18278
Liked: 1564 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy » Oct 25, 2018 12:06 pm

Veeam B&R 9.5 U4 coming out soon will not remove the local admin rights requirement from the console, this is planned for the later release.

George_Washington
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 10, 2017 9:10 am
Full Name: veeamuser001

Re: Veeam B&R console needs admin rights to start

Post by George_Washington » Oct 26, 2018 12:21 pm

Hello Foggy,

Any idea to when Veeam Console will be released without the need for "local admin"-privileges?

Also to everyone else, how do you guys made things work and keep it secure at the same time?

Post Reply

Who is online

Users browsing this forum: No registered users and 8 guests