When you create a new user that can work with the Veeam Availability Console Client Portal, you must assign a role to this user. A user role defines permissions for a user, that is, what operations a user can perform, and what scope of data is available to a user in Veeam Availability Console.
Veeam Availability Console supports the following user roles for client companies:
Company Owner is the primary user acting on behalf of a company that consumes provided backup services. The Company Owner user is created when a company account is registered in Veeam Availability Console. For each company, there can be only one Company Owner.
You can think of the Company Owner as of a super user at the company level. In the Client Portal, the Company Owner has access to all monitoring and billing data for all company locations, and can perform all types of available configuration and management operations.
Company Administrator has a similar set of privileges as the Company Owner, with a number of limitations:
- Company Administrator does not have access to billing information
- The scope of data available to a Company Administrator can be limited to one or more company locations
Company User has access to monitoring data for one or more company locations, but cannot perform most configuration and management tasks.
A Company User comes in two variants, depending on whether this user does or does not have allocated cloud repository resources:
- If no cloud repository resources are allocated for a Company User, this user can only work with the functionality available in the Veeam Availability Console Client Portal. Data available to a Company User can be limited to one or more company locations, and the user can access data pertaining to all managed Veeam backup agents, Veeam Backup & Replication or Veeam Backup Enterprise Manager servers in these locations.
- If there are cloud repository resources allocated for a Company User, this user acts as a subtenant in Veeam Cloud Connect. A Subtenant User can store to the cloud backups created with Veeam backup agent, using own credentials. In addition, a Subtenant User has access to the Client Portal. The scope of monitoring data available to a Subtenant User in the Client Portal is limited to a computer (or computers) that is protected with Veeam backup agent, and whose data is stored on a cloud repository.
For details on Veeam Cloud Connect subtenants, see Subtenants.
Invoice Auditor has access to billing details pertaining to a company. This user can view invoices and receive billing notifications.
User Permissions
The following table describes what functionality is available to company users in the Client Portal in accordance with their user role.
Functionality | Company Owner | Company Administrator | Company User | Subtenant User | Invoice Auditor |
Configuration tasks (locations, portal users, backup policies, alarms, company info) | Full | Full | N/A | N/A | N/A |
Veeam Backup & Replication jobs | Full | Full | Full | N/A | N/A |
Veeam backup agent jobs | Full | Full | Read | Read* | N/A |
Failover plans | Full | Full | Read | N/A | N/A |
Discovery rules | Full | Full | N/A | N/A | N/A |
Managed computers | Full | Full | Read | N/A | N/A |
Invoices | Read | N/A | N/A | N/A | Read |
Backup reports | Full | Full | Read | N/A | N/A |
Summary | Read | Read | Read | Read* | N/A |
Active alarms | Full | Full | Read | Read* | N/A |
Protected computers | Read | Read | Read | Read* | N/A |
* Limited to computers protected with Veeam backup agents, with backups stored on a cloud repository under the account of a Subtenant User.
