Authorization and Security

To start working with the Veeam Service Provider Console REST API, clients must first authenticate themselves and receive authorization grant by obtaining an access token and a refresh token.

  • Access token is a string that represents authorization issued to the client and must be used in all requests. By default, access token expires after 1 hour.
  • Refresh token is a string that represents authorization granted to the client and can be used to obtain a new access token when the current access token expires.

You authorize to Veeam Service Provider Console REST API using the following methods:

Page updated 7/15/2025

Page content applies to build 9.0.0.29555