Depending on the scenario, the user accounts must have the permissions listed in the following subsections:
Permissions for Backup to Object Storage
If you plan to back up data to object storage, make sure that the user account that you use to connect to the object storage has the required permissions. The list of required permissions differs depending on the selected object storage:
If you plan to back up data to the Amazon S3 or S3 compatible storage, make sure the user account that you plan to use has the following permissions:
For information about required permissions for Amazon S3 storage with immutability enabled, see the Using Object Storage Repositories section in the Veeam Backup & Replication User Guide.
If you plan to back up data to the Google Cloud storage, make sure the user account that you plan to use has the following permissions:
To use guest processing, make sure to configure user accounts according to the requirements listed in this section.
Consider the following general requirements when choosing a user account:
- [For file indexing] Choose a user account that has administrator privileges.
- When using Active Directory accounts, make sure to provide a user account in the DOMAIN\Username format.
- When using local user accounts, make sure to provide a user account in the Username or HOST\Username format.
- To process a Domain Controller server, make sure that you are using a user account that is a member of the DOMAIN\Administrators group.
- To back up a Read-Only Domain controller, a delegated RODC administrator account is sufficient. For more information, see Microsoft documentation.
Depending on the application you need to back up, the user must have the permissions listed in the table below:
To back up Microsoft SQL Server data, the user whose account you plan to use must be:
If you need to provide minimal permissions, the user account must be assigned the following roles and permissions:
Microsoft Active Directory
To back up Microsoft Active Directory data, the user account must be a member of the built-in Administrators group.
To back up Microsoft Exchange data, the user account must have the Local Administrator permissions in Microsoft Exchange.
To back up Oracle data, the user account must be configured as follows:
To back up Microsoft SharePoint server, the user account must have the Farm Administrator role.
To back up Microsoft SQL databases of the Microsoft SharePoint Server, the user account must have the same privileges as for the Microsoft SQL Server.