This is an archive version of the document. To get the most up-to-date information, see the current version.

Roles and Users

You can assign one of the following roles to users or groups of users who plan to work with Veeam Backup & Replication:

  • Veeam Restore Operator
  • Veeam Backup Viewer
  • Veeam Backup Operator
  • Veeam Backup Administrator
  • Veeam Tape Operator

A role assigned to the user defines the user activity scope: what operations in Veeam Backup & Replication the user can perform. Role security settings affect the following operations:

  • Starting and stopping jobs
  • Performing restore operations

Users having different roles can perform a different set of operations:

Role

Operations

Veeam Restore Operator

Can perform restore operations using existing backups and replicas. Mind that during restore, Veeam Restore Operator can overwrite existing instances: VMs during VM restore, disks during disk restore and files during file-level restore.

Veeam Backup Viewer

Has the “read-only” access to Veeam Backup & Replication. Can view existing jobs and review the job session details.

Veeam Backup Operator

Can start and stop existing jobs, export backups and create VeeamZip backups.

Veeam Backup Administrator

Can perform all administrative activities in Veeam Backup & Replication.

Veeam Tape Operator

Can manage tapes and perform the following operations: tape inventory, tape export, tape eject, tape catalog, inventory library, catalog library, rescan library, import tapes, eject tape from drive.

You can assign several roles to the same user. For example, if the user must be able to start jobs and perform restore operations, you can assign the Veeam Backup Operator and Veeam Restore Operator roles to this user.

Mind the following:

  • The user account under which the Veeam Backup Service runs must have the Veeam Backup Administrator role. By default, during installation the Veeam Backup Administrator role is assigned to users in the Administrators group. If you change the default settings, make sure that you assign the Veeam Backup Administrator role to the necessary user account. It is recommended to assign the Veeam Backup Administrator role to the user account explicitly rather than the group to which the user belongs.
  • Built-in administrator accounts (Domain\Administrator and Machine\Administrator) always have full access in Veeam Backup & Replication, even if you exclude them from all Veeam Backup & Replication roles. However, if you delete the Administrators group from the Veeam Backup & Replication roles, only the built-in local Administrator will have access in Veeam Backup & Replication but not full.

To assign a role to the user or user group:

  1. From the main menu, select Users and Roles.
  2. Click Add.
  3. In the User or group field, enter a name of a user or user group in the DOMAIN\USERNAME format.
  4. From the Role list, select the necessary role to be assigned.

Roles and Users