Configuring Delegation Mode

To define what VMs tenants of vSphere Self-Service Backup Portal can back up and restore, the Enterprise Manager administrator can configure the delegation mode. The delegation mode specifies conditions that must be met to allow a tenant to add a VM to the backup job.

To configure a delegation mode:

1. Log in to Veeam Backup Enterprise Manager using an administrative account.
2. To open the Configuration view, click Configuration in the top right corner.
3. In the Configuration view, select the Self-service section.

The Self-service section is available if you have added to Enterprise Manager at least one Veeam backup server with a vCenter Server as part of its infrastructure.

4. If a vCloud Director server is added to your Veeam backup infrastructure, make sure that the vSphere tab is selected.
5. In the Delegation Mode window, select a delegation mode:

• vSphere tags — to allow tenants to work with VMs to which the specified tags are assigned. If you select this option, you must specify the necessary tags in the properties of the tenant account. You can specify tags for each tenant account individually. For more information, see Adding Tenant Account and Editing Tenant Account.
• vSphere role — to allow tenants to work with VMs that are available to the specified vSphere role.

To specify a vSphere role:

1. Next to the vSphere role option, click Select Role.

Alternatively, if you have already selected a role before, click the name of the currently selected role.

2. In the Select Role window, select the required vSphere role.
3. Click OK.

• VM privilege — to allow tenants to work with VMs for which they have the specified vSphere privilege.

To select a vSphere privilege:

1. In the VM privilege field, click the name of the currently selected privilege. By default, the VirtualMachine.Interact.Backup privilege is selected.
2. In the Select Privilege window, select the required privilege.
3. Click OK.

6. Click OK.