When you create a new user that can work with the Veeam Availability Console Client Portal, you must assign a role to this user. A user role defines permissions for a user, that is, what operations a user can perform, and what scope of data is available to a user in the Client Portal.
Veeam Availability Console supports the following user roles for client departments:
Department Owner is the primary user acting on behalf of a department that consumes provided backup services. The Department Owner user is created when a department account is registered in Veeam Availability Console. For each department, there can be only one Department Owner.
You can think of the Department Owner as of a super user at the department level. In the Client Portal, the Department Owner has access to all monitoring and chargeback data for all department locations, and can perform all types of available configuration and management operations.
Department Administrator has a similar set of privileges as the Department Owner, with a number of limitations:
- Department Administrator does not have access to chargeback information
- The scope of data available to a Department Administrator can be limited to one or more department locations
Department User has access to monitoring data for one or more department locations, but cannot perform most configuration and management tasks.
A Department User comes in two variants, depending on whether this user does or does not have allocated cloud repository resources:
- If no cloud repository resources are allocated for a Department User, this user can only work with the functionality available in the Veeam Availability Console Client Portal. Data available to a Department User can be limited to one or more department locations, and the user can access data pertaining to all managed Veeam backup agents, Veeam Backup & Replication or Veeam Backup Enterprise Manager servers in these locations.
- If there are cloud repository resources allocated for a Department User, this user acts as a subtenant in Veeam Cloud Connect. A Subtenant User can store to the cloud backups created with Veeam backup agent, using own credentials. In addition, a Subtenant User has access to the Client Portal. The scope of monitoring data available to a Subtenant User in the Client Portal is limited to a computer (or computers) that is protected with Veeam backup agent, and whose data is stored on a cloud repository.
For details on Veeam Cloud Connect subtenants, see Subtenants.
Chargeback Auditor has access to chargeback details pertaining to a department. This user can view chargeback reports and receive chargeback notifications.
User Permissions
The following table describes what functionality is available to department users in the Client Portal in accordance with their user role.
Functionality | Department Owner | Department Administrator | Department User | Subtenant User | Chargeback Auditor |
Configuration tasks (locations, portal users, backup policies, alarms, department info) | Full | Full | N/A | N/A | N/A |
Veeam Backup & Replication jobs | Full | Full | Read | N/A | N/A |
Veeam backup agent jobs | Full | Full | Read | Read* | N/A |
Failover plans | Full | Full | Read | N/A | N/A |
Discovery rules | Full | Full | N/A | N/A | N/A |
Managed computers | Full | Full | Read | N/A | N/A |
Chargeback Reports | Read | N/A | N/A | N/A | Read |
Backup reports | Full | Full | Read | N/A | N/A |
Summary | Read | Read | Read | Read* | N/A |
Active alarms | Full | Full | Read | Read* | N/A |
Protected computers | Read | Read | Read | Read* | N/A |
* Limited to computers protected with Veeam backup agents, with backups stored on a cloud repository under the account of a Subtenant User.
