---
title: "Accessing Veeam ONE Components"
description: "You can interact with Veeam ONE using Veeam ONE Client, Veeam ONE Web Client and REST API: To access Veeam ONE Client: Log on to the machine where Veeam ONE Client is installed. From the Microsoft Windows Start menu, choose Veeam ONE Client."
canonical: "https://helpcenter.veeam.com/docs/one/userguide/access.html"
breadcrumb: "User Guide > Getting Started with Veeam ONE > Accessing Veeam ONE Components"
dateModified: "2026-10-23"
---
# Accessing Veeam ONE Components
You can interact with Veeam ONE using Veeam ONE Client, Veeam ONE Web Client and REST API:
## Veeam ONE Client {#access_client}
To access Veeam ONE Client:
1. Log on to the machine where Veeam ONE Client is installed.
2. From the **Microsoft Windows Start** menu, choose **Veeam ONE Client**.
3. In the authentication window, specify the FQDN or IP address of a server where the Veeam ONE Server component runs and enter the credentials of the account used to connect to Veeam ONE Client. To connect using credentials of the account under which you are logged on to the machine, select the **Log in as current user** check box.
The user account must either:
- Be a member of the *Veeam ONE Administrators* or *Veeam ONE Read-Only Users* group. For details on user groups, see [Security Groups](security_groups.md).
Members of the *Power User* group can also access the Veeam ONE Client, but receive only the *Read-Only* role.
- Have permissions assigned to objects in the vCenter Server or VMware Cloud Director inventory hierarchy. For details on assigning permissions to objects, see [Multi-Tenant Monitoring and Reporting](multitenant.md).
This prerequisite applies to the VMware vSphere platform only.
4. Click **Connect**.
5. If Veeam ONE is configured to display a consent banner, read the banner content and click **I Agree**.
For details on configuring the consent banner, see [Banners](consent_banners.md).
6. If MFA is enabled for your Veeam ONE instance, but you have not configured it on the **Log in to Veeam ONE** screen:
1. Click the *Veeam ONE Web UI* link.
[](images/mfa_login_setup.png){.toggle}
2. You are redirected to Veeam ONE Web Client and presented with the [Configure Multi-Factor Authentication](access.md#mfa-configure) screen. Follow the instructions presented in step 5 of Veeam ONE Web Client to scan the QR code with your preferred authenticator app and enter the one-time code. When complete, click **Confirm** and close the browser window.
[](images/mfa_config_confirmed.png){.toggle}
3. When returned to the Veeam ONE Client **Log in to Veeam ONE** screen, click **Connect**.
7. When multi-factor authentication (MFA) is enabled and already configured through the **Access Management** screen on Veeam ONE Web Client, enter the one-time code shown in your authenticator app and click **Confirm** on the Multi-Factor Authentication (MFA) screen to open Veeam ONE Client.
[](images/mfa_authenticator_client.png){.toggle}
For details on on configuring MFA, see [Configuring Multi-Factor Authentication](users_mfa.md).
To create a shortcut for the connection, click **Save Shortcut**. You can create one shortcut for every Veeam ONE server. The server name will be saved after the first successful login.
::: note
If you want to save credentials for a connection in a shortcut, you must agree to save these credentials in the Windows Credentials Manager.
:::
## Other Ways to Access Veeam ONE Client
To gain faster access to Veeam ONE Client, you can launch it without providing user credentials in the authentication window.
::: note
When MFA is enabled, you cannot use these shortcuts to launch Veeam ONE Client unattended. Veeam ONE Client attempts to connect, but because MFA is required, the authentication window still opens — on the **Multi-Factor Authentication (MFA)** step, where you enter the one-time code and click **Confirm**. If you have not set up MFA yet, the authentication window opens on the step with the link to Veeam ONE Web Client.
:::
- To launch Veeam ONE Client under the account of a user that is currently logged to the machine, in the command shell call the `Monitor.exe` file that resides in the installation directory and pass the `/currentuser` parameter. For example:
`"C:\Program Files\Veeam\Veeam ONE\Veeam ONE Monitor Client\Veeam.One.Client.exe" /currentuser`
- To launch Veeam ONE Client with explicit user credentials, in the command shell call the `Monitor.exe` file that resides in the installation directory and pass the `/username` and `/password` parameters. For example:
`"C:\Program Files\Veeam\Veeam ONE\Veeam ONE Monitor Client\Veeam.One.Client.exe" /username tech\john.smith /password PaSSw0rd`
You can save this set of commands as a Windows shortcut and use it to quickly access Veeam ONE Client.
## Veeam ONE Web Client {#access_web_client}
To access Veeam ONE Web Client:
1. Open the Veeam ONE Web Client website using one of the following options:
- Access Veeam ONE Web Client from the Veeam ONE Client. To do this, in the main menu, click **Reports**.
- Access Veeam ONE Web Client locally, on the machine where the Veeam ONE Web UI component is installed. To do this, choose **Veeam ONE Web Client** in the Microsoft Windows Programs menu.
- Access Veeam ONE Web Client remotely using your web browser. To do this, browse to the URL of the Veeam ONE Web Client website. This website runs on the machine where the Veeam ONE Web UI component is installed. The URL must look similar to the following one (assuming you use the default website port `1239`):
`https://webserver.domain.tld:1239`
Note that Veeam ONE Web Client is available over HTTPS.
2. If Veeam ONE is configured to display a consent banner, read the banner content and click **I Agree**.
3. Enter credentials of a user account under which you want to connect to Veeam ONE Web Client.
The user account must either:
- Be a member of the *Veeam ONE Administrators,* *Veeam ONE Power Users, Veeam ONE Backup Administrators* or *Veeam ONE Read-Only Users* group. For details on user groups, see [Security Groups](security_groups.md).
- Have permissions assigned on objects in the vCenter Server or VMware Cloud Director inventory hierarchy. For details on, see [Multi-Tenant Monitoring and Reporting](multitenant.md).
This prerequisite applies to the VMware vSphere and VMware Cloud Director platforms.
4. Log in using one of the following methods:
- Click **Log in** — enter your login credential name and password.
- Click **Log in as current user** — log in using your stored credentials from a previous session using credentials under which you are logged onto the machine.
- Click **Log in with your certificate** — log in using your stored credentials.
- Click **Log in with SSO** — log in using your preferred SSO provider.
[](images/login.png){.toggle}
5. If multi-factor authentication (MFA) is enabled through **Access Management**, on the **Multi-Factor Authentication (MFA)** screen, enter the one-time code shown in your authenticator app and click **Log in**. On the first login after MFA is enabled, you are prompted to set up MFA: scan the displayed QR code with your authenticator app or enter the secret key manually, then enter the generated code and click **Confirm**.
[](images/mfa_authenticator.png){.toggle}
6. In the displayed **Welcome** pop-up window, click **Start** to view all updates.
If you do not want to view updates, click **Skip**.
If you do not want Veeam ONE Web Client to display the **Welcome** window, select the **Don't show again** check box.
::: note
If you log in for the first time, make sure that pop-up windows are allowed for the Veeam ONE Web Client website.
:::
If you used a self-signed certificate and try to access Veeam ONE Web Client from a remote machine, the browser will display a warning notifying that the connection is untrusted (although it is secured with TLS).
## Veeam ONE REST API {#access_rest_api}
For details on accessing Veeam ONE REST API Swagger UI, see section [Evaluation with Swagger UI](https://helpcenter.veeam.com/references/one/13/rest/tag/SectionOverview#section/Evaluation-with-Swagger-UI) of the REST API Reference guide.
::: note
If MFA is enabled for the account, include the current verification code from your authenticator app in the Veeam-Mfa-Code header of the `POST /token` request. MFA cannot be set up through the REST API. If MFA is enforced for an account that has not yet enrolled an authenticator app, token issuance keeps failing until enrollment is completed in Veeam ONE Web Client.
:::