Tenant Account Types

In this article

    To work with the cloud resources provided by the SP, the tenant uses a tenant account. Veeam Backup & Replication offers the following types of tenant accounts:

    • Standalone tenant account — a regular tenant account for Veeam Cloud Connect Backup and Veeam Cloud Connect Replication scenarios. When the SP creates an account of this type, the SP specifies a name and password for the account, assigns a quota on the cloud repository to the tenant and subscribes the tenant to a hardware plan. To learn more, see Veeam Cloud Connect Backup and Veeam Cloud Connect Replication.
    • Active Directory tenant account — a tenant account for Microsoft Active Directory (AD) users. Tenants with accounts of this type can connect to the SP using their AD credentials and use Veeam Agent operating in the standalone mode to back up data to a cloud repository. To learn more, see Active Directory Tenant Account.
    • vCloud Director tenant account — a tenant account used to provide Veeam Cloud Connect backup and replication resources to vCloud Director organizations. When the SP creates an account of this type, the SP specifies a vCD organization, assigns a quota on the cloud repository to the tenant and specifies an Organization vDC that will be used as a cloud host for tenant VM replicas. To learn more, see vCloud Director Support.

    Active Directory Tenant Account

    Veeam Backup & Replication lets the SP provide Active Directory users with access to a cloud repository. This functionality can be useful for large organizations that have Microsoft Active Directory and Veeam Cloud Connect infrastructure deployed and want to allow their users to create off-site backups with Veeam Agent.

    Using the the Active Directory tenant account functionality, a backup administrator of the organization can allocate quotas on a cloud repository directly for AD users without the need to configure subtenant accounts. For Veeam Agent users, the functionality helps to avoid maintaining additional set of tenant account credentials. Instead, users can connect to the SP using credentials of their user account in AD.

    Active Directory tenant accounts utilize the secondary password functionality. To learn more, see Secondary Password for Tenant Account.

    How It Works

    Data backup to a cloud repository using an Active Directory tenant account works in the following way:

    1. The SP creates an Active Directory tenant account. In the properties of the tenant account, the SP specifies settings to connect to the AD domain controller, selects an AD user account and assigns backup resources to the tenant account. To learn more, see Configuring Active Directory Tenant Account.
    2. A Veeam Agent user creates a backup job targeted to a cloud repository. In the properties of the Veeam Agent backup job, the user specifies credentials of their user account in Active Directory.
    3. Veeam Agent connects to the SP backup server. Veeam Backup & Replication on the SP backup server authenticates the user in Active Directory.
    4. Veeam Backup & Replication creates a secondary password for the tenant account and passes this password to Veeam Agent. Veeam Agent saves the secondary password to its database.
    5. During subsequent backup job sessions, Veeam Agent uses the secondary password to connect to the SP.

    Considerations and Limitations

    Consider the following:

    Related Topics

    Tenant Account Credentials

    Related Tasks

    I want to report a typo

    There is a misspelling right here:

     

    I want to let the Veeam Documentation Team know about that.