Veeam Backup Enterprise Manager administrator can permit tenants to work with the VMs via the vSphere Self-Service Backup Portal. Tenants will be able to work only with VMs within their assigned delegation mode.
As a Veeam Backup Enterprise Manager administrator, you can perform the following actions on this tab:
- Add a new configuration for a tenant
- Edit an already issued tenant configuration settings
- Export a list of the used tenant configurations
- Remove tenant configurations
To add tenant configuration settings:
- Log in to the Enterprise Manager web UI using the administrative account.
- Click Configuration and select Self-service tab on the left. On a vSphere tab you will see the list of tenant configurations that you can manage. The Self-service tab will become available after you add at least one Veeam backup server with a vCenter server as part of its infrastructure to Veeam Backup Enterprise Manager.
Select a Delegation mode that you will use to specify the scope of VMs, available to the tenant:
- vSphere role — tenants have within their scope only VMs where they have a certain vSphere role
- VM privilege — tenants have within their scope only VMs with a certain vSphere privilege
- vSphere tags — tenants have within their scope only VMs with certain vSphere tags
- Click Add to add a new configuration.
- In the dialog displayed, select the Type of the configuration you are adding (for users or groups of users) and a username of an Account for either a trusted domain or the same domain as Enterprise Manager host.
You cannot add configuration for a local account.
- Assign the Repository from the list of those available to you. This repository will be used by the users backup jobs. The list includes repositories configured for managed Veeam backup servers.
You cannot assign cloud-based repositories, as well as NetApp or Nimble storage systems storing snapshots created by Veeam snapshot-only jobs.
- Specify repository storage Quota that will be applied. You can choose GB or TB from the drop-down list and enter the required quantity.
- Select how Job scheduling will be organized. The following options are available:
- Allow: Tenant has full access to all job scheduling options
- Allow: Tenant can create daily and monthly jobs only
- Deny: Creates daily jobs with randomized start time within the backup window
- Deny: Creates job with no schedule assigned
- For more detailed information on job scheduling, see Configure Job Scheduling.
- If you selected the vSphere tags as a Delegation mode, you can enter a set of tags, that will define the scope of vSphere VMs available for the users backup jobs.
- If you are adding a Group Type of configuration, you can choose to Assign a separate quota to each group member. It means that each user within this vSphere group will have only its own VMs within his scope. Other users VMs and jobs will not be displayed.
- Click Show Advanced Job Settings link to specify what backup job will be used as a template for vSphere users VMs processing. Select the backup job which settings will be copied and used as a template. For that, use the Copy from list:
- Default job settings – backup job will be configured with the standard default vSphere backup job settings as they are shown in the Veeam backup console. For more information, see Creating Backup Jobs. If you do not use the Show advanced job settings link, default job settings will be applied to template.
- <job_name> – select the vSphere backup job from which settings will be obtained. When finished, click Apply.
Backup repository settings specified for vSphere user configuration at step 6 (global settings) will take priority over those prescribed by selected job template.
To populate the list of job templates, you need at least one vSphere backup job to be configured in Veeam backup console.
- Click Save to save configuration.
As an Enterprise Manager administrator, you can modify existing configurations or remove them from the list of managed configurations.
Make sure proper connection is established between Veeam backup server and Enterprise Manager, otherwise changes in the list of managed configurations will not be stored in the Veeam configuration database, and vSphere infrastructure in Veeam management console will not reflect the updates.
To modify vSphere users configuration settings:
- On the vSphere tab select the account you need.
- Click Edit in the top left corner to open the Edit dialog.
- Edit the configuration settings as necessary. If you want to display job settings applied to backup jobs for this configuration, click Show Advanced Job Settings in the dialog:
- In the Advanced job settings section you can examine existing job settings.
- In the Copy from field you will see the name of a vSphere job previously selected as a template for this vSphere user configuration.
- To change the job that should be used as a template from that point forward, in the Copy from list select the job you need and click Apply.
Consider the following recommendations for modifying vSphere user configuration settings:
- If you plan to modify job template for a selected vSphere user configuration, remember that new settings will be applied only to the new jobs created for that user; existing jobs will not be affected.
- If you want existing backup job (template) to store backups to another repository instead of the currently used in configuration, then backup administrator should do the following:
- Move corresponding backups of vSphere objects to the new repository.
- Modify backup job (template) and vSphere configuration settings settings so that job would point to the new repository.
Otherwise, data will be stored to the former repository, exceeding the quota.
To download a report on configurations of vSphere users, click Export. The report will be saved to the excelreport.xls file in the default location (local Downloads folder). This report includes information on the account name, used repository, space and quota in the existing configurations.
To remove a vSphere user configuration from the list of managed configurations:
- When on the Self-Service tab of the Configuration view, select the configuration you need in the preview pane.
- Click the Remove button in the top left corner.
When you remove the vSphere users configuration, you will be asked if you want to delete all the jobs and backup files that come with it.