Step 5. Update Account Roles

At the Roles step of the wizard, you can modify the list of operations that Veeam Backup for Microsoft Azure will be able to perform using permissions of the service account:

  1. Set the Enable granular role assignment toggle to On and click Edit Roles.
  2. In the Management roles section, choose actions that will be performed using the service account:
  • Worker management — permissions of this service account will be used to launch worker instances. If you create a service account of this type, you will be able to select it when managing worker configurations.
  • Repository management — permissions of this service account will be used to create new repositories in target Azure blob containers and to further access the repositories during data protection and disaster recovery operations. If you create a service account of this type, you will be able to select it when configuring repository settings.

Important

For Veeam Backup for Microsoft Azure to perform the selected actions using the service account, the account must be assigned the permissions listed in sections Worker Permissions and Repository Permissions.

  1. In the Operational roles section, choose resources that will be protected using permissions of the service account, and operations that will be performed with these resources: