You can create a new portal user with the Subtenant role and allocate to this user cloud repository space, or user quota. A user quota is an amount of storage space allocated for specific user within the company quota on a cloud repository.
A Subtenant can consume storage resources provided through the user quota for storing Veeam agent backups in the cloud. When pointing a Veeam backup agent job to a cloud repository, you can specify credentials of a Subtenant. Backup files created by the Veeam backup agent job will consume cloud space within the Subtenant quota only.
In addition to storing backups on a cloud repository, a Subtenant can access the Veeam Service Provider Console Client Portal. The scope of monitoring data available to a Subtenant in the Client Portal is limited to a computer (or computers) protected with Veeam backup agents whose data is stored on a cloud repository under the account of the Subtenant. That is, a Subtenant can view details only about those Veeam backup agents that are configured to store backup data to the cloud under credentials of this user.
You can create subtenant accounts only for companies based on native Veeam Cloud Connect tenants. Creating subtenant accounts for companies based on VMware vCloud Director tenant accounts is not supported.
To create a new Subtenant in Veeam Service Provider Console:
- Log in to Veeam Service Provider Console.
For details, see Accessing Veeam Service Provider Console.
- In the menu on the left, click Companies.
- Select the necessary company in the list.
- At the top of the list, click Manage > Users.
- In the Users window, click New.
Veeam Service Provider Console will launch the New User wizard.
- At the User Info step of the wizard, specify user title, first name, last name and email address.
Veeam Service Provider Console can use this address to send email notifications to the user, such as password reset notifications.
- At the Login Info step of the wizard, specify user credentials and choose a user role:
- [For a subtenant of a native Veeam Cloud Connect company] In the Username, Password and Confirm password fields, type a user name and password.
It is recommended to use a password that contains characters from at least 3 of the following categories: uppercase characters, lowercase characters, base 10 digits (0 through 9), non-alphanumeric characters. The recommended password length is 6 or more characters.
- [For a subtenant of a vCloud Director company] Click a link next to the Username field and select a vCloud Director Organization user account to which you want to allocate a quota on the cloud repository.
The user account must be created in advance in vCloud Director. For details on vCloud Director user accounts, see section Subtenant Accounts for vCloud Director Tenant Accounts of the Veeam Cloud Connect Guide.
- In the Role field, choose Subtenant.
- At the Locations step of the wizard, select company locations whose data must be available for the user in the Client Portal.
- At the Quota step of the wizard, allocate cloud repository resources to the user.
You can specify the size of the user quota or create an unlimited user quota. With an unlimited user quota, the Subtenant can consume all storage space within the company quota on a cloud repository.
- At the At the Multi-Factor Authentication step of the wizard you can assign a second authentication factor to all company users. For details on MFA, see Configuring Multi-Factor Authentication.
To enable MFA for the created user, set the Enforce the MFA access toggle to On. On the next authorization session, the user will be prompted to configure MFA.
- At the Summary step of the wizard, review user details and click Finish.
Automatic Creation of Subtenants
Veeam Service Provider Console can automatically create Subtenants. This normally happens if you use a backup policy that is configured to store backup data on a cloud repository and to create subtenant accounts for each managed Veeam backup agent automatically. When such backup policy is assigned to Veeam backup agents, Veeam Service Provider Console creates a Subtenant account for each Veeam backup agent to which the backup policy is assigned. For details, see Step 14. Specify Cloud Repository Quota.
Veeam backup agents use these Subtenant accounts to write data to a cloud repository. The name of each Subtenant account is formed according to the following pattern: <company_name>_<computer_name>.