User Roles and Permissions

Veeam Backup for Salesforce controls access to its functionality with the help of user roles and scopes. A role defines what operations users can perform and a scope defines to which companies and Salesforce organizations the permissions apply.

There are 4 user roles that you can assign to user groups and users working with Veeam Backup for Salesforce:

  • Administrator — can perform all configuration actions, backup and restore operations. This role gives a user access to the full product functionality (except for the IdP configuration).
  • Backup Operator — can create and manage backup policies, manage protected data and perform all restore and archival operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.
  • Restore Operator — can only perform restore operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.
  • Viewer — can monitor backup and restore processes without performing any operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.

The following table describes the functionality available to users with different roles in the Veeam Backup for Salesforce UI. Note that users with Backup Operator, Restore Operator and Viewer roles assigned will have the described permissions only within the scope specified when adding these users.

Tab

Functionality

Administrator

Backup Operator

Restore Operator

Viewer

Backup

Managing backup policies, performing backup

Full

Full

Viewing backup policies and sessions

Viewing backup policies and sessions

Downloading backup session logs

Full

Full

-

-

Restore

Managing restore jobs, performing restore

Full

Full

Full

Viewing restore jobs and sessions

Downloading restore session logs

Full

Full

Full

-

Browse

Viewing backed-up data, performing restore

Full

Full

Full

-

Archive

Managing archival policies, performing archiving

Full

Full

Viewing archival policies and sessions

Viewing archival policies and sessions

Downloading archival session logs

Full

Full

Full

-

Configuration

 

Salesforce

Managing companies

Full

-

-

-

Managing Salesforce organizations

Full

Adding and viewing Salesforce organizations

-

-

Managing databases

Full

Full

-

-

Managing encryption keys

Full

Full

-

-

 

Managing data masking templates

Full

-

-

-

Users and Roles

Managing users

Full

-

-

-

Security

Managing Connected App

Full

-

-

-

Managing identity provider

Local administrator only

-

-

-

Managing key management service

Full

Full

-

-

Managing audit trail

Full

-

-

-

Alerts

Managing notifications

Full

Full*

-

-

Managing connection settings

Full

-

-

-

License

Managing license

Full

Viewing license information

-

-

About

Downloading product logs

Full

-

-

-

Configuring advanced settings

Full

-

-

-

*Does not apply to alerts created for the License and File storage size types of events. For more information on event types, see Managing Alerts.

Page updated 11/5/2024

Page content applies to build 3.1.0.2378