Granting Permissions to Users

When you install Veeam Agent for IBM AIX, the product program files are placed to the directories on the system volume. For full access to Veeam Agent for IBM AIX files, super user (root) privileges are required. Rights to execute product files and run commands are also granted to users that belong to the veeam group.

The veeam group is automatically created by Veeam Agent for IBM AIX at the process of the product installation. To let regular users work with Veeam Agent for IBM AIX without the need to gain ileges, you can add the necessary users to this group. Users in the veeam group will be able to execute Veeam Agent for IBM AIX commands and perform backup and restore tasks under a regular user account.

To add a user to the veeam group, use the following command:

chgrpmem -m + <username> veeam

where <username> is a user name of the account to which you want to grant access to Veeam Agent for IBM AIX.

For example:

root@srv01:~# chgrpmem -m + user01 veeam

 

Granting Permissions to UsersImportant

Mind the following:

  • To add a user to the veeam group, you must have super user (root) privileges in the IBM AIX OS.
  • After a user is added to the veeam group, the user must re-login to the IBM AIX OS to complete the procedure of adding the user to the group.
  • Add only trusted users to the veeam group. Veeam Agent for IBM AIX daemon runs and executes commands and scripts with the super user privileges. Thus, users who belong to this group can potentially escalate their privileges through the use of pre-job/post-job scripts.

 

To check whether the user who is currently logged in to the IBM AIX OS is added to the veeam group, you can use the following command:

groups

For example:

user@srv01:~$ groups
user adm cdrom sudo dip plugdev lpadmin sambashare veeam

 

Page updated 8/7/2024

Page content applies to build 4.5.0.1616