Permissions for Service Account on Windows

This section contains permissions required by Veeam Backup for Microsoft 365 for a service account that is used to run Veeam Backup for Microsoft 365 Proxy Service on a Windows-based backup proxy server. By default, Veeam Backup for Microsoft 365 uses Local System account, but you can use a service account of your own.

The following are required permissions for a service account on a Windows-based backup proxy server:

The account must have Log on as a service right.
Full Access to the C:\Windows\Temp folder.
Full Access for the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\My registry key.
For the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl registry key, a new value must be created with the account name as a value name and set to 1.
The account must be a member of the Performance Monitor Users security group.