Permissions

This table contains the list of operations that require specific user account permissions.

Note

If you plan to restore Oracle databases using Veeam Explorer for Oracle, consider the required permissions listed in the Permissions section of Veeam Explorers User Guide.

Operation	Required Roles and Permissions
Configuring Veeam Plug-in	To configure Veeam Plug-in and update Oracle instance setting, the OS user account or database user account must have SYSDBA privileges.
Performing backup and restore in Veeam Plug-in	The OS or database user accounts must have SYSBACKUP privileges to perform backup and restore operations. This requirement is relevant for both the operating system authentication and database authentication methods. For more information on authentication methods, see Authentication Against Database. If you use the operating system authentication method, consider the following: The plug-in process will be ran in the background by the Oracle listener owner account. This user account must have SYSDBA privileges. If you use the CONNECT command in the RMAN script, the plug-in manager process will be started by the owner of the Oracle listener, not by the user that started the RMAN client. Thus, if the listener is owned by a cluster service user (grid) that does not have SYSDBA privileges, the plug-in manager will not be able to collect database properties and the backup will fail. As a workaround, you can add SYSDBA privileges to the grid user. This workaround is not required in case you use the database authentication method. To learn more about Oracle specific account privileges, see this Oracle article. Note: If you are using Veeam Plug-in for Oracle RMAN in managed mode, the OS or database user accounts must have SYSDBA privileges to perform backup and restore operations. For more information, see Permissions for Veeam Plug-in Management.
Connecting to Veeam Backup & Replication, managing backups	The account which is used to authenticate against Veeam Backup & Replication must have access permissions on required Veeam repository servers. To learn how to configure permissions on repositories, see Access and Encryption Settings on Repositories. To work with backups created by Veeam Plug-in, you can use only the account used for creating the backup. If you want to use another account, assign the Veeam Backup Administrator role or Veeam Backup Operator and Veeam Restore Operator roles to the account. To learn how to assign Veeam Backup & Replication roles, see the Users and Roles section in the Veeam Backup & Replication User Guide.

Operation

Required Roles and Permissions

Configuring Veeam Plug-in

To configure Veeam Plug-in and update Oracle instance setting, the OS user account or database user account must have SYSDBA privileges.

Performing backup and restore in Veeam Plug-in

The OS or database user accounts must have SYSBACKUP privileges to perform backup and restore operations. This requirement is relevant for both the operating system authentication and database authentication methods. For more information on authentication methods, see Authentication Against Database.

If you use the operating system authentication method, consider the following:

The plug-in process will be ran in the background by the Oracle listener owner account. This user account must have SYSDBA privileges.
If you use the CONNECT command in the RMAN script, the plug-in manager process will be started by the owner of the Oracle listener, not by the user that started the RMAN client. Thus, if the listener is owned by a cluster service user (grid) that does not have SYSDBA privileges, the plug-in manager will not be able to collect database properties and the backup will fail. As a workaround, you can add SYSDBA privileges to the grid user. This workaround is not required in case you use the database authentication method.

To learn more about Oracle specific account privileges, see this Oracle article.

Note:

If you are using Veeam Plug-in for Oracle RMAN in managed mode, the OS or database user accounts must have SYSDBA privileges to perform backup and restore operations. For more information, see Permissions for Veeam Plug-in Management.

Connecting to Veeam Backup & Replication, managing backups

The account which is used to authenticate against Veeam Backup & Replication must have access permissions on required Veeam repository servers. To learn how to configure permissions on repositories, see Access and Encryption Settings on Repositories.

To work with backups created by Veeam Plug-in, you can use only the account used for creating the backup. If you want to use another account, assign the Veeam Backup Administrator role or Veeam Backup Operator and Veeam Restore Operator roles to the account. To learn how to assign Veeam Backup & Replication roles, see the Users and Roles section in the Veeam Backup & Replication User Guide.