Discussions specific to the VMware vSphere hypervisor
Post Reply
Nikolaj7
Novice
Posts: 7
Liked: never
Joined: Mar 16, 2010 6:29 pm
Full Name: Nikolaj Tuxen Gerstrøm
Contact:

VMware Role permissions for Veeam Replication

Post by Nikolaj7 »

Hi,

I would like to ask if anybody can specify what the VMware role permissions of a VMware user role in a remote VMware vCenter and VMware vSphere setup should be set to, when performing a Veeam Replication job from om VMware environment to another?

It should only be the minimum requirements, that I would like to know since we only want to give the least permissions to this user.
That is, we only want this user to be able to perform replication to the remote vCenter setup and nothing else.

Thanks.

Regards,
Nikolaj7

Nikolaj7
Novice
Posts: 7
Liked: never
Joined: Mar 16, 2010 6:29 pm
Full Name: Nikolaj Tuxen Gerstrøm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Nikolaj7 »

Hi,

Does anybody have a reply for this?

Regards,
Nikolaj7

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

Here you go:

vStorage API - Virtual Appliance mode

Global:
Log event

Datastore:
Low-level file operations
Browse datastore
Allocate space
Remove file

Virtual Machine - State:
Create snapshot
Remove snapshot

Virtual Machine – Configuration:
Disk change tracking
Change resource
Add existing disk
Remove disk

Virtual Machine – Provisioning:
Allow read-only disk access

Virtual Machine - Inventory:
Register

Resource:
Assign virtual machine to resource pool

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

vStorage API - Network mode

Global:
Log event

Datastore:
Low-level file operations
Browse datastore
Allocate space
Remove file

Virtual Machine - State:
Create snapshot
Remove snapshot

Virtual Machine – Configuration:
Disk change tracking

Virtual Machine – Provisioning:
Allow read-only disk access

Virtual Machine - Inventory:
Register

Resource:
Assign virtual machine to resource pool

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

vStorage API - SAN mode

Global:
Log event

Datastore:
Low-level file operations
Browse datastore
Allocate space
Remove file

Virtual Machine - State:
Create snapshot
Remove snapshot

Virtual Machine – Configuration:
Disk change tracking
Disk lease

Virtual Machine – Provisioning:
Allow read-only disk access
Allow virtual machine download

Virtual Machine - Inventory:
Register

Resource:
Assign virtual machine to resource pool

Nikolaj7
Novice
Posts: 7
Liked: never
Joined: Mar 16, 2010 6:29 pm
Full Name: Nikolaj Tuxen Gerstrøm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Nikolaj7 »

Hi Vitality S.

Thanks for your reply.

Can you confirm that these permission settings are for the remote replica side vCenter permissions?
(not the local vCenter setup you are backing up)

Thanks.

Regards,
Nikolaj

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

Those permissions are cumulative, meaning that they apply for both source and target side.

Though If you need to specify permissions for the target side only, you should cross out Virtual Machine - State and Virtual Machine – Configuration, should work.

jlsung
Influencer
Posts: 21
Liked: never
Joined: Sep 15, 2011 1:41 pm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by jlsung »

What are rights needed to vCenter DR Site ?
We will use different account on local and DR site on Vcenter.

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

It depends on what you're planning to do with a DR vCenter Server (failback, failover etc.). Please see the most recent permissions list for further info.

jlsung
Influencer
Posts: 21
Liked: never
Joined: Sep 15, 2011 1:41 pm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by jlsung »

To do an offsite replication, I think I just need "Replica Failover" rights. Right ?

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

In this case I believe failover and failback should be all you need.

jlsung
Influencer
Posts: 21
Liked: never
Joined: Sep 15, 2011 1:41 pm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by jlsung »

OK, thanks.

zipman
Novice
Posts: 7
Liked: 1 time
Joined: Aug 03, 2014 11:58 pm
Full Name: Flavio Visentin
Contact:

Re: VMware Role permissions for Veeam Replication

Post by zipman »

I need to restrict veeam user rights acessing a vSphere 5.5U1 installation.
I user Veeam 7.0.871. I'm pretty sure the list is not updated, since it lacks at least tagging privileges to modify the VM's tags with backup's status.
Can you please point me to the article where this privileges are updated (I didn't find it by myself)?
Or can you update this list please?
Thanks
Flavio

Vitaliy S.
Product Manager
Posts: 24256
Liked: 1863 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VMware Role permissions for Veeam Replication

Post by Vitaliy S. »

Hi Flavio,

The most recent version of granular permissions can be found on our website > http://www.veeam.com/veeam_backup_7_0_p ... ons_pg.pdf

Thanks!

pahomov.mv
Lurker
Posts: 2
Liked: never
Joined: Dec 09, 2010 3:41 pm
Contact:

Re: VMware Role permissions for Veeam Replication

Post by pahomov.mv »

Hello
Please answer, do we need to grant Datastore.Browse permissions on source VMware vCenter if we want to replicate VM from it to target side?

foggy
Veeam Software
Posts: 19463
Liked: 1767 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: VMware Role permissions for Veeam Replication

Post by foggy »

Yes.

Post Reply

Who is online

Users browsing this forum: Google [Bot] and 14 guests