By default, Veeam Backup Enterprise Manager offers a group vSphere Self-Service Backup Portal tenant account for users of the domain that includes the Enterprise Manager server. To configure granular access to storage quotas and backup settings, you can create additional tenant accounts.
To add a tenant account for vSphere Self-Service Backup Portal:
- Log in to the Enterprise Manager web UI using the administrative account.
- Click Configuration and select the Self-service tab on the left. The Self-service tab is available if you added at least one Veeam backup server with a vCenter server as part of its infrastructure to Veeam Backup Enterprise Manager.
- Click Add.
- In the Add window, from the Type list, select the type of the account you want to create. You can select the User account type for a single vSphere user or the Group account type for a group of vSphere users.
- In the Account field, enter the name of the user or group for which you want to create the tenant account. The name must be provided in the DOMAIN\Username format. You can create user accounts for users and groups of the domain that includes the Enterprise Manager server or a trusted domain.
You cannot create a vSphere Self-Service Backup Portal tenant account for a local user account.
- In the Repository field, select from the list of backup repositories a target repository that will contain VM backups created by the tenant. The list includes repositories configured on Veeam backup servers added to Veeam Backup Enterprise Manager.
You cannot assign to tenants Veeam Cloud Connect repositories, as well as NetApp or Nimble storage systems storing snapshots created by Veeam snapshot-only jobs.
- In the Quota field, specify the repository storage quota for the tenant account. Choose GB or TB from the drop-down list and enter the required quota size.
- In the Job scheduling field, select how the job scheduling will be organized. The following options are available:
- Allow: Tenant has full access to all job scheduling options.
- Allow: Tenant can create daily and monthly jobs only.
- Deny: Creates daily jobs with randomized start time within the backup window.
- Deny: Creates job with no schedule assigned.
For detailed information on job scheduling, see Configure Job Scheduling.
- If you selected the vSphere tags option at the process of configuring the delegation mode, in the vSphere tags field, enter tags assigned VMs that will be available to the tenant.
- [Optional] If you add a tenant account of the Group type, select the Assign a separate quota to each group member check box to provide each user of the group with individual quota on the backup repository. Each user will be able to work with backup jobs and VM backups created by this user only. Backups and jobs of other users will not be displayed.
- If you want to specify advanced settings for backup jobs of the tenant, click the Show Advanced Job Settings link and do the following:
- In the Advanced job settings section, view the currently used backup job settings.
- From the Copy from list, select what backup job settings will be applied to tenant jobs. You can select from the following options:
- Default job settings — this option is selected by default. With this option selected, tenant backup jobs will be configured with the default settings as they are shown in the Veeam backup console. For more information, see the Creating Backup Jobs section of the Veeam Backup & Replication User Guide.
- <job_name> — select an existing backup job for vSphere VMs that will be used as a template for tenant backup jobs. The backup job must be configured in advance on the Veeam backup server added to Veeam Backup Enterprise Manager. When a tenant creates a backup job on the vSphere Self-Service Backup Portal, Enterprise Manager will copy job settings from the template and apply these settings to the job.
- Click Apply.
- Click Save.
Backup repository settings specified for the tenant account at the step 6 will take priority over backup repository settings prescribed by the selected job template.
To populate the list of job templates, you must have at least one vSphere backup job configured in the Veeam backup console.