- The user account that you specify for guest processing of the Microsoft SharePoint in the backup job should be a Farm Administrator for the corresponding SharePoint farm (see the corresponding section of the Veeam Backup & Replication User Guide for Hyper-V or for VMware). It should also have the sysadmin fixed role assigned on the Microsoft SQL Server Server where the content database is stored. This is the recommended setting; however, if you need to provide minimal permissions, you can assign the following to this account:
- SQL Server instance-level roles: dbcreator and public
- Database-level roles: db_backupoperator, db_denydatareader, public; for system databases (master, model, msdb) - db_backupoperator, db_datareader, public
- Securables: view any definition, view server state
- The account used for working with Veeam Explorer for Microsoft SharePoint requires membership in the sysadmin fixed server role on the staging Microsoft SQL Server.
- When planning for the account under which Veeam Explorer will connect to target SharePoint server, consider the following:
- If you are using ADFS as authentication provider, consider that in case of Windows Authentication you can either use current account or specified account.
- In case of Forms Authentication, only the specified account can be used (not current account), and you should enter the corresponding user name and password.
- The account used for connection with target SharePoint server where document item(s)/list will be restored needs the following:
- If permissions of the item being restored are inherited from the parent item (list), Full Control for that list is required.
- If permissions are not inherited, and restored item will replace an existing item, Contribute for the item and Full Control for its parent list are required.
- The account used for connection with target SharePoint server where a site will be restored needs Full Control for that site. If this user account does not have site administrator or system account rights, and this user selects Restore permissions option, consider that this user's permissions will be skipped (not restored).
Send feedback | Updated on 6/10/2016
