Permissions
The following sections describe permissions required for proper operation of Veeam Service Provider Console.
Veeam Service Provider Console Service Account
The service account must have Local Administrator permissions on the machine where Veeam Service Provider Console Server component is installed.
Connecting to Microsoft SQL Server
The account used to connect to the Microsoft SQL Server hosting the Veeam Service Provider Console database must have the following permissions:
- public role (default permissions)
- dbcreator role (needed to create the Veeam Service Provider Console database during the Veeam Service Provider Console installation procedure)
- db_owner and public roles on the Veeam Service Provider Console database
- public permissions on the master database
- public permissions on the msdb database
- VIEW SERVER STATE, ALTER ANY CONNECTION and CONNECT SQL permissions
- [For Always-On Availability Groups] VIEW ANY DEFINITION permissions
Connecting Veeam Cloud Connect Server
- Connection account
The account used to connect a Veeam Cloud Connect server to Veeam Service Provider Console must have:
- local Administrator permissions on the Veeam Cloud Connect machine
- access to the admin$ share on the Veeam Cloud Connect machine
- Service account
The account used to authenticate the management agent installed on the Veeam Cloud Connect server in Veeam Service Provider Console must have:
- local Administrator permissions on the Veeam Cloud Connect machine
- Backup Administrator role assigned in Veeam Cloud Connect
- access to the admin$ share on the Veeam Cloud Connect machine
Discovery
The account used to discover computers in the client infrastructure must have local Administrator permissions on all discovered computers.
Installing and Uninstalling Veeam Backup Agents
The account used to install and uninstall Veeam backup agents must have local Administrator permissions on computers where the install and uninstall procedures are performed.
Configuring ConnectWise Manage Connection
The account used to configure ConnectWise Manage plugin connection must be assigned a security role that has access to the following security modules:
Companies Security Module
Security Module Parameter | Add Level | Edit Level | Delete Level | Inquire Level |
|---|---|---|---|---|
Company Maintenance | None | None | None | All |
Configurations (Allow Access to Veeam Managed Computer) | All | All | All | All |
Contacts | None | None | None | All |
Finance Security Module
Security Module Parameter | Add Level | Edit Level | Delete Level | Inquire Level |
|---|---|---|---|---|
Agreements | All | All | None | All |
Invoicing | None | None | None | All |
Procurement Security Module
Security Module Parameter | Add Level | Edit Level | Delete Level | Inquire Level |
|---|---|---|---|---|
Product Catalog | All | All | None | All |
Service Desk Security Module
Security Module Parameter | Add Level | Edit Level | Delete Level | Inquire Level |
|---|---|---|---|---|
Close Service Tickets | All | All | None | All |
Service Tickets | My | My | My | My |
System Security Module > Table Setup
Security Module Parameter | Add Level | Edit Level | Delete Level | Inquire Level |
|---|---|---|---|---|
Company / Company Status | All | None | None | All |
Company / Company Type | All | None | None | All |
Company / Configuration | All | None | None | All |
Invoicing / Billing Cycle | All | None | None | All |
Products / Category | All | None | None | All |
Products / Product Type | All | None | None | All |
Products / Subcategory | All | None | None | All |
Products / UOM | All | None | None | All |
Service / Priority | All | None | None | All |
Service / Service Board | All | None | None | All |
Important! |
Make sure you have enabled All access on Add and Inquire levels to the Table Setup security module before customizing the security module. |
Configuring ConnectWise Automate Connection
The account used to configure Veeam Service Provider Console plugin for ConnectWise Automate connection must be assigned a user class that has the following permissions:
Permission | Create | Read | Update | Delete | Access |
|---|---|---|---|---|---|
Alerts | N\A | N\A | Full | N\A | Full |
Clients | N\A | Full | Full | Full | N\A |
Computers | Full | N\A | Full | Full | N\A |
Computers: Show All | N\A | N\A | N\A | N\A | Full |
Contacts | N\A | Full | N\A | N\A | N\A |
Groups: Show All | N\A | N\A | N\A | N\A | Full |
Internal Monitors | Full | N\A | Full | Full | N\A |
Plugin Manager | N\A | N\A | N\A | N\A | Full |
Remote Monitors | Full | N\A | N\A | Full | N\A |
Solution Center | N\A | N\A | N\A | N\A | Full |
System Config | N\A | N\A | N\A | N\A | Full |
System Dashboard: Config | N\A | N\A | N\A | N\A | Full |
System Dashboard: Management | N\A | N\A | N\A | N\A | Full |
System Dashboard: Overview | N\A | N\A | N\A | N\A | Full |
System Dashboard: Tickets | N\A | N\A | N\A | N\A | Full |
Tickets | Full | Full | Full | Full | N\A |
Ticket Requests | N\A | N\A | N\A | N\A | Full |
Plugin: Veeam Service Provider Console plugin for ConnectWise Automate | N\A | N\A | N\A | N\A | Full |