By default, Veeam Backup Enterprise Manager offers a group vSphere Self-Service Backup Portal tenant account for users of the domain that includes the Enterprise Manager server. To configure granular access to storage quotas and backup settings, you can create additional tenant accounts.
If you plan to provide a user with access to vSphere Self-Service Backup Portal only, and not to the main Enterprise Manager UI, you do not need to configure an account for this user in the Roles tab of the Configuration view.
To add a tenant account for vSphere Self-Service Backup Portal:
- Sign in to the Enterprise Manager web UI using the administrative account.
- In the Configuration view, select the Self-service tab.
The Self-service tab is available if you have added at least one Veeam backup server with a vCenter server as part of its infrastructure to Veeam Backup Enterprise Manager.
- Click Add.
- In the Add window, select an account type from the Type list:
- User — an account type for a single vSphere user
- Group — an account type for a group of vSphere users
- In the Account field, enter the name of the user or group for which you want to create the tenant account. The name must be provided in the DOMAIN\Username format. You can create user accounts for users and groups of the domain that includes the Enterprise Manager server or a trusted domain.
You cannot create a vSphere Self-Service Backup Portal tenant account for a local user account.
- In the Repository field, select from the list of backup repositories a target repository that will contain VM backups created by the tenant. The list includes repositories configured on Veeam backup servers added to Veeam Backup Enterprise Manager.
Backup repository settings specified for the tenant account at the step 6 will take priority over backup repository settings prescribed by the selected job template.
You cannot assign to tenants Veeam Cloud Connect repositories, as well as NetApp or Nimble storage systems storing snapshots created by Veeam snapshot-only jobs.
- In the Quota field, specify the repository storage quota for the tenant account. Choose GB or TB from the drop-down list and enter the required quota size.
- In the Job scheduling field, select how the job scheduling will be organized. The following options are available:
- Allow: Tenant has full access to all job scheduling options
- Allow: Tenant can create daily and monthly jobs only
- Deny: Creates daily jobs with randomized start time within the backup window
For tenant backup jobs, the backup window is defined by backup window settings specified in Veeam Backup Enterprise Manager. Backup window settings specified for the job template that you will select at the step 12 do not affect tenant jobs. For information on how to specify the backup window in Enterprise Manager, see Customizing Chart Appearance.
- Deny: Creates job with no schedule assigned
For detailed information on job scheduling, see Edit Job Schedule.
- If you have multiple vCenter Servers in your infrastructure and want to provide the tenant account with access to VMs of specific vCenter Servers only, from the vCenter scope list, select the necessary vCenter Servers. By default, the All vCenter Servers options is selected.
- If you selected the vSphere tags option at the process of configuring the delegation mode, in the vSphere tags field, enter tags assigned VMs that will be available to the tenant.
- [Optional] If you add a tenant account of the Group type, select the Assign a separate quota to each group member check box to provide each user of the group with individual quota on the backup repository. Each user will be able to work with backup jobs and VM backups created by this user only. Backups and jobs of other users will not be displayed.
- To specify advanced settings for backup jobs of the tenant, do the following:
- Click the Show Advanced Job Settings link.
- In the Advanced job settings section, view the currently used backup job settings.
- From the Copy from list, select the backup job settings that will be applied to tenant jobs. You can select from the following options:
- Default settings — this option is selected by default. With this option selected, tenant backup jobs will be configured with the default settings as they are shown in the Veeam backup console. For more information, see the Creating Backup Jobs section of the Veeam Backup & Replication User Guide.
- <Job name> — an existing backup job for vSphere VMs. With this option selected, the backup job will be used as a template for tenant backup jobs. The job must be configured in advance on the Veeam backup server added to Veeam Backup Enterprise Manager. When a tenant creates a backup job on the vSphere Self-Service Backup Portal, Enterprise Manager will copy job settings from the template and apply these settings to the job.
- Click Apply.
To populate the list of job templates, you must have at least one vSphere backup job configured in the Veeam backup console.
- Click Save.