Veeam Backup & Replication allows backup administrators to delegate VM backup and restore operations to VMware vSphere users. For that, Veeam Backup & Replication offers the vSphere Self-Service Backup Portal — a web tool based on Veeam Backup Enterprise Manager. With vSphere Self-Service Backup Portal, users can create and manage backup jobs that process vSphere VMs and restore data from backups created with these jobs. All operations are performed via the web UI without the need to deploy the Veeam Backup & Replication console on the user machine.
To define what VMs vSphere users can back up and restore, Veeam Backup Enterprise Manager offers the concept of delegation mode. The delegation mode specifies conditions that must be met to allow a user add a VM to the backup job. The administrator can choose from 3 delegation modes based on vSphere tags, vSphere roles and VM privileges. For more information, see Configuring Delegation Mode.
In terms of vSphere Self-Service Backup Portal, a vSphere user that works with the portal is considered a tenant. To access the portal, a tenant uses the tenant account created by the Enterprise Manager administrator. The administrator can create two types of tenant accounts: for a separate vSphere user and group of users. The tenant account settings define storage quota available to the tenant on the backup repository and settings for backup jobs created by the tenant. For more information, see Adding Tenant Accounts.
To simplify backup job management for tenants, advanced job settings (such as backup settings and storage settings) and schedule settings are automatically populated from job templates. The administrator can assign a separate template to each tenant account.
When working with vSphere Self-Service Backup Portal, administrators and tenants perform the following tasks:
To let tenants work with vSphere Self-Service Backup Portal, the Veeam Backup Enterprise Manager administrator performs the following tasks:
The default delegation mode allows tenants to access VMs with the VirtualMachine.Interact.Backup privilege. The administrator can change the delegation mode, if necessary.
By default, Veeam Backup Enterprise Manager offers a group tenant account for users of the domain that includes the Enterprise Manager server. Each user can access the portal and use a 30 GB quota on the default backup repository to create VM backups. Users can create backup jobs with default advanced settings and custom schedule. The administrator can edit settings of the default account and create other accounts to configure granular access to storage quotas and backup settings.
Administrators perform tasks with vSphere Self-Service Backup Portal using the Self-service tab in the Configuration view of the Enterprise Manager UI. If a vCloud Director server is added to your Veeam backup infrastructure, the working area of the Self-service tab will display two inner tabs: vSphere and vCloud. To work with vSphere Self-Service Backup Portal, make sure the vSphere tab is opened. The vCloud tab is used to work with VMware vCloud Director organizations and their configurations. For more information, see Working with VMware vCloud Director.
Tenants access the vSphere Self-Service Backup portal using the portal URL obtained from the Veeam Backup Enterprise Manager administrator. To log in to the portal, the tenant uses credentials of the domain user account. For more information, see Accessing Portal.
Tenants can use the portal to work with vSphere VMs that are available to them according to the selected delegation mode. VM backup settings are defined by the properties of the tenant account.
Tenants can use vSphere Self-Service Backup Portal to perform the following operations:
- Create and manage backup jobs that process vSphere VMs.
- View VM backup statistics.
- Restore vSphere VMs to the original location.
- Restore files from indexed and non-indexed guest OS file systems of vSphere VMs.
- Perform item-level restore for Microsoft SQL Server and Oracle databases.
For more information, see Using vSphere Self-Service Backup Portal.