Requirements for Veeam Explorer Operations
Check the following permissions and contact your database administrator if necessary:
- User account that you specify for guest processing of the Microsoft SQL Server VM in the backup job should have the sysadmin fixed role assigned on that SQL Server (otherwise, no database content will be visible in Veeam Explorer). See also this Veeam KB article. This is the recommended setting; however, if you need to provide minimal permissions to the account performing backup operation, you can assign the following:
- SQL Server instance-level roles: dbcreator and public
- Database-level roles: db_backupoperator, db_denydatareader, public; for system databases (master, model, msdb) - db_backupoperator, db_datareader, public
- Securables: view any definition, view server state
- The account used to run Veeam Explorer for Microsoft SQL Server should have sufficient permissions for the folder where you plan to export the database files: Read and Write are minimal recommended.
- The account you will use to access the target Microsoft SQL Server where database will be restored needs sysadmin fixed role on that server. This also refers to the account that will be used to access the staging server (if necessary).
- The account you plan to use for connection to the Windows machine (where database log backup files will be copied for further log replay) will need sufficient permissions to access the administrative share on that machine: Read and Write are minimal required. For restore scenarios, that machine is your target SQL Server.
Delegating Restore Rights via Enterprise Manager
If you plan to delegate rights to perform database restore operations to personnel in charge, you need to assign an Enterprise Manager role to them and configure its settings accordingly:
- Log in to Enterprise Manager with administrative rights, go to Configuration tab.
- To create a role for restore operator, follow the steps described in the Configuring Security Settings section of the Veeam Backup Enterprise Manager User Guide.
- To allow for database restore, make sure the Microsoft SQL Server databases checkbox is selected for restore operator’s account in the Account dialog.
- If you need to prevent restore operators from overriding production databases at restore, select the Deny in-place database restores (safer) check box.
Authorized users will be able to log in to Enterprise Manager and access the Items tab with database restore commands and options.