Permissions

The following table lists the required permissions for user accounts to restore Oracle data.

Operation

Required Roles and Permissions

Veeam Explorer for Oracle launch

The account used to run Veeam Explorer for Oracle must meet the following requirements:

  • The account must be a member of the local Administrators or Users group.
  • The account must have the Veeam Backup Administrator or Veeam Restore Operator role on the backup server.

Restore, Publishing, Instant Recovery, Accessing staging server

When restoring to a Windows machine, make sure to configure user accounts as follows:

  • The account must be a member of the local Administrators group on the target machine. In addition, if ASM is used, the account must be a member of the ORA_ASMADMIN group (for Oracle 12 and higher).
  • The user account must be granted appropriate permissions to access Oracle databases; Read and Write are the required minimum, Full Control is recommended.
  • To recover data and copy archived logs to the specified server, the user account must be granted sufficient permissions to access the administrative share.

When restoring to a Linux machine, make sure that the user account has root permissions on the target machine and has membership in the following groups: OSASM [if ASM is used] (typically asmadmin), OSDBA (typically dba), Oracle Inventory group (typically oinstall).

Restore from RMAN backups

When restoring to a Windows machine, make sure to configure user accounts as follows:

  • The account must be a member of the local Administrators group and have sysdba privileges.
  • The account must be granted appropriate permissions to access Oracle databases; Read and Write are the required minimum, Full Control is recommended.
  • To restore data and copy archived logs to the specified server, the user account must be granted sufficient permissions to access the administrative share.

When restoring to a Linux machine:

  • The account must be a member of the dba group.
  • The account does not need root privileges, but make sure that the following requirements are met:
  • If Oracle home on the target machine uses an encrypted wallet, the TNS_ADMIN (if it is used for the target Oracle home) and ORACLE_BASE environment variables on the target server must be set.
  • The resource limits of the user account must be within the recommended range. For more information on user resource limits, see the Oracle documentation.

Export as database files

The account under which Veeam Explorer for Oracle runs must be a member of the local Administrators group.