Permissions

The following sections describe permissions required for proper operation of Veeam Service Provider Console.

Veeam Service Provider Console Service Account

The service account must have Local Administrator permissions on the machine where Veeam Service Provider Console Server component is installed.

Connecting to Microsoft SQL Server

The account used to connect to the Microsoft SQL Server hosting the Veeam Service Provider Console database must have the following permissions:

• public role (default permissions)
• dbcreator role (needed to create the Veeam Service Provider Console database during the Veeam Service Provider Console installation procedure)
• db_owner and public roles on the Veeam Service Provider Console database
• public permissions on the master database
• public permissions on the msdb database
• VIEW SERVER STATE, ALTER ANY CONNECTION and CONNECT SQL permissions
• [For Always-On Availability Groups] VIEW ANY DEFINITION permissions

Connecting Veeam Cloud Connect Server

• Connection account

The account used to connect a Veeam Cloud Connect server to Veeam Service Provider Console must have:

• local Administrator permissions on the Veeam Cloud Connect machine
• access to the admin$ share on the Veeam Cloud Connect machine

• Service account

The account used to authenticate the management agent installed on the Veeam Cloud Connect server in Veeam Service Provider Console must have:

• local Administrator permissions on the Veeam Cloud Connect machine
• Backup Administrator role assigned in Veeam Cloud Connect
• access to the admin$ share on the Veeam Cloud Connect machine

Connecting Windows Veeam Backup & Replication Server

• Connection account

The account used to connect a Veeam Backup & Replication server to Veeam Service Provider Console must have:

• local Administrator permissions on the remote machine
• access to the admin$ share on the remote machine

• Service account

The account used to authenticate the management agent installed on the Veeam Backup & Replication server in Veeam Service Provider Console must have:

• local Administrator permissions on the remote machine
• Backup Administrator role assigned in Veeam Backup & Replication
• access to the admin$ share on the remote machine

Discovery

The account used to discover computers in the client infrastructure must have local Administrator permissions on all discovered computers.

Installing and Uninstalling Veeam Backup Agents

The account used to install and uninstall Veeam backup agents must have local Administrator permissions on computers where the install and uninstall procedures are performed.

Configuring ConnectWise Manage Connection

The account used to configure ConnectWise Manage plugin connection must be assigned a security role that has access to the following security modules:

Companies Security Module

Finance Security Module

Procurement Security Module

Service Desk Security Module

System Security Module > Table Setup