Discussions specific to the VMware vSphere hypervisor
Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Oct 26, 2018 12:59 pm

Hi George,

Cannot speak for all companies, but many of them are using Veeam ONE or Enterprise Manager to give access to the helpdesk/monitoring engineers.

Hope this helps!

foggy
Veeam Software
Posts: 18278
Liked: 1564 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy » Oct 26, 2018 1:34 pm

George_Washington wrote:
Oct 26, 2018 12:21 pm
Any idea to when Veeam Console will be released without the need for "local admin"-privileges?
Unfortunately, we cannot give any particular ETA for this feature at this stage.

Fenris
Novice
Posts: 4
Liked: 1 time
Joined: Oct 25, 2018 6:55 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Fenris » Oct 27, 2018 3:03 pm

We have the same issue, a fix would be appreciated!

George_Washington
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 10, 2017 9:10 am
Full Name: veeamuser001

Re: Veeam B&R console needs admin rights to start

Post by George_Washington » Oct 30, 2018 10:14 am

Vitaliy S. wrote:
Oct 26, 2018 12:59 pm
Cannot speak for all companies, but many of them are using Veeam ONE or Enterprise Manager to give access to the helpdesk/monitoring engineers.
Hello Vitaly,

I have to agree that the Enterprise Manager has certain features that are usefull for a backup & restore-engineer, but it misses out on a lot of features the Windows Client has. For instance not being able to restore a virtual machine with a different name, so that the original one (that might be broken) sits next to the newly restored (though renamed) virtual machine.

For now we have implemented and intermediary fix, but it's suboptimal.

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Oct 30, 2018 12:13 pm

Ok, thanks for the follow up. BTW, do you mind sharing your solution with Fenris who asks for a "fix" for that? ;)

George_Washington
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 10, 2017 9:10 am
Full Name: veeamuser001

Re: Veeam B&R console needs admin rights to start

Post by George_Washington » Oct 31, 2018 8:47 am 1 person likes this post

My sincere apologies for not sharing my "fix".

What I did was create a few virtual machines with Windows Server 2016 and Veeam Console, that sits between our Veeam-environment and the backup/restore-engineers. It's suffice to say that we locked everything down from a network perspective, because on the VM all backup/restore-engineers need (or should is say Veeam Console) "local admin"-privileges.

EmpTee
Novice
Posts: 9
Liked: never
Joined: Feb 04, 2016 2:14 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by EmpTee » Dec 04, 2018 12:42 am

While we are on the topic of delegating permissions, it would be incredibly useful to be able to delegate starting a configured backup job to a normal user (not backup admin).

I have devs working that need to be able to easily rollback major changes to development environments via a veeam restore.

I can delegate the restore process to them via Veeam Enterprise Manager, but am unable to delegate starting the backup job to them. This means support always has to be available to initiate a manual backup as required.

If i'm allowing a dev to restore an entire VM, why can't I allow them to back it up too (unless i'm missing an obvious way to do this)?

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Dec 04, 2018 5:01 pm

Hi EmpTee,

Have you considered using Quick Backup function (see the portal user role section) in this case? For example, your dev team can initiate it at any time when they need to do some tests and create a backup.

Thanks!

EmpTee
Novice
Posts: 9
Liked: never
Joined: Feb 04, 2016 2:14 am
Contact:

Re: Veeam B&R console needs admin rights to start

Post by EmpTee » Dec 12, 2018 12:47 am

Hi Vitaly,

Didn't realise the quick backup option was available.

Is there a way to delegate only initiating backup jobs, and not allowing restores at all?

Thanks

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Dec 12, 2018 1:26 pm

Not that i can think of, but you can potentially limit the restore types for these users.

mephisto
Expert
Posts: 117
Liked: 7 times
Joined: Nov 07, 2012 6:49 pm
Full Name: Mephisto poa
Contact:

[MERGED] best practices to access veeam console and security for techs

Post by mephisto » Jan 09, 2019 4:53 pm

Hi guys,

I'm wondering if there are best practices recommended to manage Veeama backup servers as I noticed we can't run the console without admin rights for example and I think the web interface it part of enterprise product which at the moment we have no requirement. I've checked https://bp.veeam.expert/ but no luck finding what I'm after.

What are the best methods for letting people run Veeam console to manage backups/restores without needing admin access to the machine they run the console? Normally we allow people to RDP into the server that has the management console installed for example.

Any suggestions would be really appreciated :)

DGrinev
Veeam Software
Posts: 1743
Liked: 221 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: best practices to access veeam console and security for techs

Post by DGrinev » Jan 09, 2019 5:07 pm 1 person likes this post

Hi Mephisto,

We have this on the roadmap to change the said requirement in the future releases.
Please review this big thread for additional information. Thanks!

mephisto
Expert
Posts: 117
Liked: 7 times
Joined: Nov 07, 2012 6:49 pm
Full Name: Mephisto poa
Contact:

Re: Veeam B&R console needs admin rights to start

Post by mephisto » Jan 09, 2019 5:24 pm

the only other way around would be the enterprise console to have that web interface then?

Vitaliy S.
Product Manager
Posts: 22999
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. » Jan 10, 2019 7:55 pm

Yes, that's correct (still a FR), or you can use VAC or Veeam ONE (depending on your scenario).

Andrew1344
Novice
Posts: 5
Liked: never
Joined: Feb 24, 2012 3:03 pm
Full Name: andrew
Contact:

[MERGED] Windows Permissions for Backup Console

Post by Andrew1344 » Jan 31, 2019 5:26 pm

Hello ALL,

I am trying to give users access to the Veeam Console without making the user an administrator on the underlying os. Basicall I want to allow the user to open the console but have no access to the OS itself. Any suggestions?

bdufour
Expert
Posts: 198
Liked: 29 times
Joined: Nov 01, 2017 8:52 pm
Full Name: blake dufour
Contact:

Re: Windows Permissions for Backup Console

Post by bdufour » Jan 31, 2019 7:33 pm 2 people like this post

this topic has been beat to death, you can search through the forums. you may give them access to enterprise manager or veeam one for monitoring purposes, but you cant give them access to the console without the user being an admin on the underlying OS bc the account needs to mount files. veeam is working to make it so that this isnt a requirement in future releases.

lkooe
Lurker
Posts: 1
Liked: never
Joined: Apr 08, 2019 9:19 am
Full Name: LKOOE
Contact:

Re: Veeam B&R console needs admin rights to start

Post by lkooe » Apr 08, 2019 9:41 am

Until now the Backup Console worked without admin rights (under Windows10 or Windows Server 2016/19 only with UAC disabled). In larger environments this is necessary, because not every backup operator has admin rights. Since 9.5 update 4 the restore without admin rights does not work anymore, the cryptic error "Value cannot be null Parameter name: disposableObject" occurs.
This is unprofessional. When will the use of the backup console without admin rights finally be officially supported?

foggy
Veeam Software
Posts: 18278
Liked: 1564 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy » Apr 11, 2019 12:13 pm

Have you tried to perform the same restore operation under account with administrative rights and it succeeded?

powersjo
Influencer
Posts: 21
Liked: 5 times
Joined: Jun 07, 2016 12:35 pm
Full Name: Jonathan Powers
Location: United States
Contact:

Re: Veeam B&R console needs admin rights to start

Post by powersjo » May 14, 2019 2:37 pm

+1 please make this feature available so local users don't need admin rights to run the veeam backup and replication console.
Thank you,
- Powersjo :mrgreen:

https://powersjo.com/veeam

Sloan
Influencer
Posts: 12
Liked: never
Joined: Jan 14, 2013 6:40 pm
Full Name: Sloan Essman
Location: Houston, TX
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Sloan » Sep 05, 2019 7:57 pm

I'm watching this too because when I was running the 9.5 Update 3 version of the console I could run from my VDI or PC without providing admin credentials but after it installed update 4b I'm having to provide admin credentials.

Where I'm at we don't just have an admin account on our desktops. We have to request it (for 24 hours) then log off and back on and get a generated password for the local administrator account... Then any operations in the console reflect as "pc_name\administrator" and it's difficult to track who is doing what to the environment.
Sloan Essman
Energy Transfer Partners

Regnor
Service Provider
Posts: 320
Liked: 62 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Regnor » Oct 14, 2019 12:49 pm

+1

I didn't even know that you need administrative rights until now.
We advise customers that they can use the console from their desktops in order to manage Veeam.
And often there's non-technical personal which only needs to manage/export tapes, so they should have no access to the backup server itself and of course also don't have local admin rights.

Post Reply

Who is online

Users browsing this forum: Google [Bot] and 7 guests