Connection to Veeam Backup & Replication Servers
The account used to connect Veeam Backup & Replication servers must:
This role must be assigned to the account on the machine that runs Veeam Backup & Replication.
These permissions must be granted to the account on machines that run:
This includes remote access, activation and launching the DCOM application of WMI, and remote access to the root WMI namespace and sub-namespaces. For details on granting these permissions, see Configuring Permissions to Remotely Access WMI.
This permission must be granted to the account on machines that run:
- Veeam Backup & Replication
- Backup proxy, backup repository (Windows-based), WAN Accelerator, tape server and cloud gateway components (required to collect performance data from these servers)
Note: |
You must use the account with local Administrator permissions in the following cases:
You must also disable MFA for the account under which Veeam ONE agent connects to Veeam Backup & Replication. For details, see section Disabling MFA for Service Accounts of the Veeam Backup & Replication User Guide.
|
Veeam Backup Enterprise Manager Administrator Permissions
From Veeam Backup Enterprise Manager versions 12.3 or later, Veeam Backup Enterprise Manager monitoring users must be a member of a built-in Administrators group with the following privileges configured:
- Member of Performance Monitor Users and Event Log Readers security groups.
- Have permission to remotely access WMI.
For details on on granting these permissions, see Configuring Permissions to Remotely Access WMI.
For permissions for Veeam Backup & Replication servers under Veeam Backup Enterprise Manager, see Connection to Veeam Backup & Replication Servers.
