Add-VBORbacRole

Short Description

Adds a restore operator role to Veeam Backup for Microsoft 365.

Syntax

This cmdlet provides the following parameter sets:

SelectedBackupItemsParameterSet (Default)

Add-VBORbacRole -Organization <VBOOrganization> -Name <String> [-Description <String>]

-Operators <VBORbacOperator[]> -SelectedItems <VBORbacRoleItem[]> [-ExcludedItems <VBORbacRoleItem[]>] [<CommonParameters>]

AllBackupItemsParameterSet

Add-VBORbacRole -Organization <VBOOrganization> -Name <String> [-Description <String>]

-Operators <VBORbacOperator[]> [-EntireOrganization] [-ExcludedItems <VBORbacRoleItem[]>] [<CommonParameters>]

Detailed Description

This cmdlet adds a restore operator role to Veeam Backup for Microsoft 365. When you add a restore operator role, you assign permissions to restore operators to explore and restore data from backups created by Veeam Backup for Microsoft 365 for specific organization object types (users, groups, sites, teams, or the entire Microsoft 365 organization).

Parameters

Parameters
Parameter	Description	Type	Required	Position	Accept Pipeline Input
Description	Specifies a description of the restore operator role.	`String`	False	Named	False
EntireOrganization	Defines that the specified restore operators will be able to explore and restore all objects within the specified Microsoft 365 organization. Default: False	`SwitchParameter`	True	Named	False
ExcludedItems	Specifies an array of objects to exclude. The cmdlet will add a restore operator role in which the specified restore operators are not allowed to explore and restore backed-up data of these objects. Note: You cannot exclude objects that have been specified for the `SelectedItems` parameter. Accepts the `VBORbacRoleItem[]` object. To create this object, run the `New-VBORbacRoleItem` cmdlet.	`VBORbacRoleItem[]`	False	Named	False
Name	Specifies a restore operator role name. The cmdlet will add a restore operator role with this name.	`String`	True	Named	False
Operators	Specifies an array of restore operators. The cmdlet will assign permissions to these objects. Accepts the `VBORbacOperator[]` object. To create this object, run the `New-VBORbacOperator` cmdlet.	`VBORbacOperator[]`	True	Named	False
Organization	Specifies a Microsoft organization. The cmdlet will add a restore operator role to the specified Microsoft organization. Note: The organization must be a Microsoft 365 organization with modern app-only authentication or hybrid organization. Accepts the `VBOOrganization` object. To get this object, run the `Get-VBOOrganization` cmdlet.	`VBOOrganization`	True	Named	True (ByValue)
SelectedItems	Specifies an array of objects to manage. The cmdlet will add a restore operator role in which the specified restore operators are allowed to explore and restore backed-up data of these objects. Accepts the `VBORbacRoleItem[]` object. To create this object, run the `New-VBORbacRoleItem` cmdlet.	`VBORbacRoleItem[]`	True	Named	False

<CommonParameters>

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see the About Common Parameters section of Microsoft Learn.

Output Object

The cmdlet returns the VBOOperatorRole object that contains the restore operator role settings.

Examples

Adding Restore Operator Role to Microsoft Organization

This example shows how add a restore operator role:

Define an organization group with the display name UsersAlpha as a restore operator of the organization with the name ABC.
Define all organization users with a name starting with A as objects to manage.
Define all organization users with a name starting with B as objects to exclude.

$org = Get-VBOOrganization -Name "ABC"

$Group = Get-VBOOrganizationGroup -Organization $org -DisplayName "UsersAlpha"

$restoreoperator = New-VBORbacOperator -Group $Group

$UserA = Get-VBOOrganizationUser -Organization $org -DisplayName "A*"

$selecteditems = New-VBORbacRoleItem -User $UserA

$UserB = Get-VBOOrganizationUser -Organization $org -DisplayName "B*"

$excludeditems = New-VBORbacRoleItem -User $UserB

Add-VBORbacRole -Organization $org -Name "ABC Restore Operators" -Operators $restoreoperator -SelectedItems $selecteditems -ExcludedItems $excludeditems

Perform the following steps:

Run the Get-VBOOrganization cmdlet with the Name parameter to get the organization with the name ABC. Save the result to the $org variable.
Run the Get-VBOOrganizationGroup cmdlet with the $org variable and the DisplayName parameter to get an organization group with the display name UsersAlpha. Save the result to the $Group variable.
Run the New-VBORbacOperator cmdlet. Set the $Group variable as the Group parameter value. Save the result to the $restoreoperator variable.
Run the Get-VBOOrganizationUser cmdlet with the $org variable and the A* value for the DisplayName parameter to get all organization users with a name starting with A. Save the result to the $UserA variable.
Run the New-VBORbacRoleItem cmdlet. Set the $UserA variable as the User parameter value. Save the result to the $selecteditems variable.
Run the Get-VBOOrganizationUser cmdlet with the $org variable and the B* value for the DisplayName parameter to get all organization users with a name starting with B. Save the result to the $UserB variable.
Run the New-VBORbacRoleItem cmdlet. Set the $UserB variable as the User parameter value. Save the result to the $excludeditems variable.
Run the Add-VBORbacRole cmdlet. Specify the following settings:
- Set the $org variable as the Organization parameter value.
- Specify the Name parameter value.
- Set the $restoreoperator variable as the Operators parameter value.
- Set the $selecteditems variable as the SelectedItems parameter value.
- Set the $excludeditems variable as the ExcludedItems parameter value.