This is an archive version of the document. To get the most up-to-date information, see the current version.

Configuring Restore Scope

Default restore scope for users with a non-administrative role includes All objects from available backups. If you have the Enterprise Plus edition of Veeam Backup & Replication deployed in your environment, you can customize restore scope for non-administrative users.

To narrow the restore scope, perform the following steps when adding or editing a Portal User or Restore Operator account:

Open the Roles section of the Configuration view.
Click Add to add an account, or select an existing account and click Edit.
In the Restore scope section, select the Selected objects only option and click Choose.

In the Manage Scope Objects window, click Add object and select what type of objects to display. You can select from the following types: Hyper-V object, vSphere object, vCloud object, Protection Groups, File share or AHV object.

In the Add Objects window, select the objects you allow the user to restore.

Configuring Restore Scope Note:

For setting up self-service recovery restore scope, consider that reverse DNS lookup on Veeam Backup Enterprise Manager server must be functional. Otherwise, the Add Objects window will display incomplete infrastructure.

Configuring Restore Scope Tip:

Consider the following:

For VMware objects, you can switch between Hosts and Clusters, VMs and Templates, Datastores and VMs and Tags and VMs views.
For Hyper-V objects, you can switch between Hosts and VMs, Hosts and Volumes, Hosts and VM Groups views.

Click OK to save the settings.

After a user logs in to Enterprise Manager, they will be able to view objects and/or files included in their restore scope on the corresponding UI tabs.

Configuring Restore Scope Note:

The Machines and File Shares tabs display only machines and file shares that have been backed up. The Files tab displays guest OS files only for machines that have been backed up with guest file indexing enabled. For more information on indexing, see Preparing for File Browsing and Searching.

Restore scope is automatically refreshed daily on built-in schedule and after any role modification. It may happen that some newly created machines, file shares and backups are not yet presented to users in the Machines, File Shares or Files tabs right after the login to Enterprise Manager. If you cannot find an object after making a search query, click the link I don’t see my VM to refresh the view. This link, however, will not be visible until you have made an unsuccessful search.

Administrative user can click Rebuild Roles in the Roles section of Configuration page to refresh all scopes of all accounts manually. Consider that this operation will affect all configured roles.

Portal Administrators can watch the progress of security scope rebuild process on the Sessions page.