This is an archive version of the document. To get the most up-to-date information, see the current version.Required Permissions
When installing Veeam Hyper-V MP, you should take into account following security considerations.
Ops Mgr Agent Operation
The Ops Mgr agent action account must have the Administrator permissions on the Hyper-V host. To be able to monitor Veeam Backup & Replication infrastructure, you must assign the Veeam Backup Administrator role to this account as well. For more information on how to assign roles in Veeam Backup & Replication, see the Veeam Backup & Replication User Guide for Microsoft Hyper-V, section Roles and Users.
Veeam Virtualization Extensions Service
The account under which the Veeam Virtualization Extensions Service runs must be a member of the Veeam Virtualization Extensions Users local group and have Administrator rights on the server.
Connection to SCVMM (if present)
The account used to run discovery rules on System Center Virtual Machine Manager must have the following permissions to allow Ops Mgr agent on the SCVMM Server to discover and insert SCVMM-specific topology objects into Ops Mgr:
- The account must have at minimum Read-Only Administrator privileges to the VMM SDK.
- The account must be a Windows account.
- The account must be a member of the Virtual Machine Manager Servers group on the SCVMM server.
Configure the Run As profile in Ops Mgr to use such an account.
|
SCVMM is not a requirement for core monitoring and reporting functionality of Veeam Hyper-V MP. However, if you add a SCVMM server to Veeam Backup & Replication infrastructure, you must connect this SCVMM server with OpsMgr to ensure proper discovery of monitored object relations. When discovered, the SCVMM server will be used as a container in Veeam MP Hyper-V Topology views, and certain additional properties will be collected. For more information on how to connect SCVMM with OpsMgr, see this Microsoft KB article. |
Ops Mgr SDK Connection
To assign Veeam licenses to monitored Hyper-V hosts, it is required that there is SDK connection between the Veeam Virtualization Extensions Service and Ops Mgr. For this reason, VES must be installed on an Ops Mgr Management Server, and the VES service account must have the Operator or Author role assigned in Ops Mgr.
Veeam Task Manager for Hyper-V
Veeam Task Manager for Hyper-V is an on-demand dashboard which makes a direct connection to a Hyper-V cluster or host, independent of the Ops Mgr console.
To enable remote connections to Hyper-V hosts, as a minimum the account of the logged on console user must at minimum be added to the Performance Log Users group on all monitored Hyper-V hosts.