This is an archive version of the document. To get the most up-to-date information, see the current version.

Subtenant Account

To work with the cloud repository, a subtenant uses the subtenant account. Veeam Backup & Replication offers two types of subtenant accounts:

Standalone subtenant account — accounts of this type are used to back up data to the cloud repository with Veeam Agent operating in the standalone mode.
Managed subtenant account — accounts of this type are used in the Veeam Agent management scenario.

Standalone Subtenant Account

In the scenario where users on the tenant side back up data to the cloud repository with Veeam Agent operating in the standalone mode, the tenant or SP must create subtenant accounts. The number of subtenant accounts created per tenant is not limited in Veeam Backup & Replication.

Typically, the tenant is the party responsible for creating and managing subtenant accounts. However, the SP can perform the same operations with subtenant accounts as the tenant. This allows the SP to create, edit or delete subtenant accounts upon tenant requests, for example, if the tenant has no access to the Veeam Backup & Replication console.

Veeam Backup & Replication saves information about subtenant accounts in the Veeam Backup & Replication database. Every time the tenant or SP performs an operation with the subtenant account, Veeam Backup & Replication updates the subtenant data and replicates this data between the tenant side and SP side.

Subtenant Account Note:

Mind the following:

End users on the tenant side can use subtenant accounts only to connect to the SP in Veeam Agent for Microsoft Windows and Veeam Agent for Linux. The tenant must not use credentials of a subtenant account to add a SP in the Veeam backup console, although this operation can be performed in Veeam Backup & Replication 8.0 and 9.0.
Veeam Agent users on the tenant side can connect to the SP and create backups on the cloud repository under the tenant account. However, it is recommended to provide every user with a separate subtenant account. In this case, the tenant or SP can allocate storage resources on the cloud repository individually for every subtenant so that subtenants’ data is stored in the cloud in an isolated and segregated way.

Managed Subtenant Account

In the Veeam Agent management scenario where Veeam Agent is deployed and managed remotely from Veeam Backup & Replication, the tenant or SP does not need to create subtenant accounts to back up Veeam Agent machines to the cloud repository. In this scenario, Veeam Backup & Replication creates subtenant accounts automatically. Such accounts are considered as managed subtenant accounts.

Veeam Backup & Replication creates a managed subtenant account for each machine added to a backup policy. A machine uses this account to connect to the SP during the backup process.

Veeam Backup & Replication automatically generates names, passwords and descriptions for managed subtenant accounts. In contrast to standalone subtenant accounts, passwords for managed subtenant accounts are saved in the Veeam backup database on the tenant backup server only. Passwords for managed subtenant accounts are not passed to the SP side.

The tenant or SP can manually edit a managed subtenant account, if necessary. The following operations are available:

Change the password for the subtenant account. This operation is required if you want to perform bare-metal recovery from a Veeam Agent backup created by a backup policy in a cloud repository. Keep in mind that this operation is available only for the tenant in the tenant Veeam backup console. The SP cannot change the password for a managed subtenant account.
Limit subtenant quota. By default, Veeam Backup & Replication creates managed subtenant accounts with unlimited subtenant quota. The tenant or SP can limit storage quotas individually for each created subtenant account.
Disable and enable the subtenant account. By default, Veeam Backup & Replication creates managed subtenant accounts in the enabled state. After you disable a managed subtenant account, Veeam Agent managed by Veeam Backup & Replication will not be able to connect to the SP and back up data to the cloud repository.
Specify a custom description for the managed subtenant account instead of the default description generated by Veeam Backup & Replication.

To learn more about Veeam Cloud Connect support for Veeam Agent managed by Veeam Backup & Replication, see the Backup to Veeam Cloud Connect Repository section in the Veeam Agent Management Guide.