User Roles and Permissions

In this article

    When you create a new user who can work with the Veeam Service Provider Console Client Portal, you must assign a role to this user. A user role defines permissions for a user, that is, what operations a user can perform, and what scope of data is available to a user in the Client Portal.

    Company Owner

    Company Owner is the primary user acting on behalf of a company that consumes provided backup services. The Company Owner user is created when a company account is registered in Veeam Service Provider Console. For each company, there can be only one Company Owner.

    You can think of the Company Owner as of a super user at the company level. In the Client Portal, the Company Owner has access to all monitoring and billing data for all company locations, and can perform all types of available configuration and management operations.

    Company Administrator

    Company Administrator has a similar set of privileges as the Company Owner, but cannot modify or remove Company Owner.

    Location Administrator

    Location Administrator has a similar set of privileges as the Company Owner, with the following limitations:

    Location User

    Location User has access to company monitoring data but cannot perform most configuration and management tasks. This user can only work with the functionality available in the Veeam Service Provider Console Client Portal. Data available to a Location User can be limited to one or more company locations, and the user can access data pertaining to all managed Veeam backup agents, Veeam Backup & Replication or Veeam Backup Enterprise Manager servers in these locations.

    Subtenant

    A Subtenant is a user who has cloud repository resources allocated and acts as a subtenant in Veeam Cloud Connect. This user can store backups created with Veeam backup agent, using own credentials. In addition, a Subtenant has access to the Client Portal. The scope of monitoring data available to a Subtenant in the Client Portal is limited to a computer (or computers) that is protected with Veeam backup agent, and whose data is stored on a cloud repository.

    For details on Veeam Cloud Connect subtenants, see section Subtenants of the Veeam Cloud Connect Guide.

    Company Invoice Auditor

    Company Invoice Auditor has access to billing details pertaining to a company. This user can view invoices and receive billing notifications.

    User Permissions

    The following table describes what functionality is available to company users in the Client Portal in accordance with their user role.

    Functionality

    Company Owner

    Company Administrator

    Location Administrator

    Location User

    Subtenant

    Company Invoice Auditor

    Configuration tasks (locations, portal users, backup policies, alarms, company info)

    Full

    Full

    Only portal users

    N/A

    N/A

    N/A

    Veeam Backup & Replication jobs

    Full

    Full

    Full

    Read

    N/A

    N/A

    Veeam backup agent jobs

    Full

    Full

    Full

    Read

    Read*

    N/A

    Failover plans

    Full

    Full

    Full

    Read

    N/A

    N/A

    Discovery rules

    Full

    Full

    Full

    N/A

    N/A

    N/A

    Managed computers

    Full

    Full

    Full

    Read

    N/A

    N/A

    Invoices

    Read

    Read

    N/A

    N/A

    N/A

    Read

    Backup reports

    Full

    Full

    Full

    Read

    N/A

    N/A

    Summary

    Read

    Read

    Read

    Read

    Read*

    N/A

    Active alarms

    Full

    Full

    Full

    Read

    Read*

    N/A

    Protected computers

    Read

    Read

    Read

    Read

    Read*

    N/A

    * Limited to computers protected with Veeam backup agents, with backups stored on a cloud repository under the account of a Subtenant.