User Roles and Permissions
Veeam Backup for Salesforce controls access to its functionality with the help of user roles and scopes. A role defines what operations users can perform and a scope defines to which companies and Salesforce organizations the permissions apply.
There are 4 user roles that you can assign to user groups and users working with Veeam Backup for Salesforce:
- Administrator — can perform all configuration actions, backup and restore operations. This role gives a user access to the full product functionality (except for the IdP configuration).
- Backup Operator — can create and manage backup policies, manage protected data and perform all restore and archival operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.
- Restore Operator — can only perform restore operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.
- Viewer — can monitor backup and restore processes without performing any operations. You can limit access to companies and Salesforce organizations for users when assigning this role. For more information, see Adding Users.
The following table describes the functionality available to users with different roles in the Veeam Backup for Salesforce UI. Note that users with Backup Operator, Restore Operator and Viewer roles assigned will have the described permissions only within the scope specified when adding these users.
Tab | Functionality | Administrator | Backup Operator | Restore Operator | Viewer |
---|---|---|---|---|---|
Backup | Managing backup policies, performing backup | Full | Full | Viewing backup policies and sessions | Viewing backup policies and sessions |
Downloading backup session logs | Full | Full | - | - | |
Restore | Managing restore jobs, performing restore | Full | Full | Full | Viewing restore jobs and sessions |
Downloading restore session logs | Full | Full | Full | - | |
Browse | Viewing backed-up data, performing restore | Full | Full | Full | - |
Archive | Managing archival policies, performing archiving | Full | Full | Viewing archival policies and sessions | Viewing archival policies and sessions |
Downloading archival session logs | Full | Full | Full | - | |
Configuration |
| ||||
Salesforce | Managing companies | Full | - | - | - |
Managing Salesforce organizations | Full | Adding and viewing Salesforce organizations | - | - | |
Managing databases | Full | Full | - | - | |
Managing encryption keys | Full | Full | - | - | |
| Managing data masking templates | Full | - | - | - |
Users and Roles | Managing users | Full | - | - | - |
Security | Managing Connected App | Full | - | - | - |
Managing identity provider | Local administrator only | - | - | - | |
Managing key management service | Full | Full | - | - | |
Managing audit trail | Full | - | - | - | |
Alerts | Managing notifications | Full | Full* | - | - |
Managing connection settings | Full | - | - | - | |
License | Managing license | Full | Viewing license information | - | - |
About | Downloading product logs | Full | - | - | - |
Configuring advanced settings | Full | - | - | - |
*Does not apply to alerts created for the License and File storage size types of events. For more information on event types, see Managing Alerts.