Configuring Accounts and Roles
Veeam Backup Enterprise Manager implements security based on user roles by limiting access to features and data. This empowers the administrator to delegate permissions in a granular way, on an as-needed basis. For example, the administrator can grant permissions to another user to recover files without being able to see the content of the files.
Administrators grant users and groups access to Enterprise Manager by adding accounts. When adding an account, administrators assign a role to the account to provide it with permissions.
Enterprise Manager offers the following roles:
- Portal Administrator
- Portal User
- Restore Operator
For the Portal User and Restore Operator roles, administrators can also configure restore scope and provide permissions for guest OS file restore and application item restore.
This section describes management of user accounts and roles required to work with the main Enterprise Manager UI. If you plan to provide a user with access to vSphere Self-Service Backup Portal (and not to the main Enterprise Manager UI), you do not need to configure an account for this user in the Roles tab of the Configuration view. Such accounts are configured in the Self-service tab of the Configuration view. For more information, see Managing Tenant Accounts.
In This Section