Permissions
The following permissions are required for proper operation of Veeam Service Provider Console.
Connecting to Microsoft SQL Server
The account used to connect to the Microsoft SQL Server hosting the Veeam Service Provider Console database must have the following permissions:
- public role (default permissions)
- dbcreator role (needed to create the Veeam Service Provider Console database during the Veeam Service Provider Console installation procedure)
- db_owner and public roles on the Veeam Service Provider Console database
- public permissions on the master database
- public permissions on the msdb database
- [For Always-On Availability Groups] VIEW SERVER STATE, VIEW ANY DEFINITION permissions
Connecting Veeam Cloud Connect Server
- Connection account
The account used to connect a Veeam Cloud Connect server to Veeam Service Provider Console must have:
- local Administrator permissions on the Veeam Cloud Connect machine
- access to the admin$ share on the Veeam Cloud Connect machine.
- Service account
The account used to authenticate the management agent installed on the Veeam Cloud Connect server in Veeam Service Provider Console must have:
- local Administrator permissions on the Veeam Cloud Connect machine
- Backup Administrator role assigned in Veeam Cloud Connect
- access to the admin$ share on the Veeam Cloud Connect machine.
Discovery
The account used to discover computers in the client infrastructure must have local Administrator permissions on all discovered computers.
Installing and Uninstalling Veeam Backup Agents
The account used to install and uninstall Veeam backup agents must have local Administrator permissions on computers where the install and uninstall procedures are performed.
Configuring ConnectWise Manage Connection
The account used to configure ConnectWise Manage plugin connection must be assigned a security role that has access to the following security modules:
Security Module | Add Level | Edit Level | Delete Level | Inquire Level |
---|---|---|---|---|
Agreements | All | All | All | All |
Close Service Tickets | All | All | All | All |
Company Maintenance | All | All | All | All |
Company/Contact Group Maintenance | All | All | All | All |
Configurations | All | All | All | All |
Contacts | All | All | All | All |
Invoicing | All | All | All | All |
Product Catalog | All | All | All | All |
Project Tickets | All | All | All | All |
Service Tickets | All | All | All | All |
Setup Table Access for Company Configuration | All | All | All | All |
Setup Table Access for Product Types | All | All | All | All |
Setup Table Access for Product Categories | All | All | All | All |
Setup Table Access for Unit of Measure | All | All | All | All |
Configuring ConnectWise Automate Connection
The account used to configure Veeam Service Provider Console plugin for ConnectWise Automate connection must be assigned a user class that has the following permissions:
Permission | Create | Read | Update | Delete | Access |
---|---|---|---|---|---|
Alerts | N\A | N\A | Full | N\A | Full |
Clients | N\A | Full | Full | Full | N\A |
Computers | Full | N\A | Full | Full | N\A |
Computers: Show All | N\A | N\A | N\A | N\A | Full |
Contacts | N\A | Full | N\A | N\A | N\A |
Groups: Show All | N\A | N\A | N\A | N\A | Full |
Internal Monitors | Full | N\A | Full | Full | N\A |
Plugin Manager | N\A | N\A | N\A | N\A | Full |
Remote Monitors | Full | N\A | N\A | Full | N\A |
Solution Center | N\A | N\A | N\A | N\A | Full |
System Config | N\A | N\A | N\A | N\A | Full |
System Dashboard: Config | N\A | N\A | N\A | N\A | Full |
System Dashboard: Management | N\A | N\A | N\A | N\A | Full |
System Dashboard: Overview | N\A | N\A | N\A | N\A | Full |
System Dashboard: Tickets | N\A | N\A | N\A | N\A | Full |
Tickets | Full | Full | Full | Full | N\A |
Ticket Requests | N\A | N\A | N\A | N\A | Full |
Plugin: Veeam Service Provider Console plugin for ConnectWise Automate | N\A | N\A | N\A | N\A | Full |