---
title: "Add-VBORbacRole"
description: "This cmdlet adds a restore operator role to Veeam Backup for Microsoft 365. When you add a restore operator role, you assign permissions to restore operators to explore and restore data from backups created by Veeam Backup for Microsoft 365 for..."
canonical: "https://helpcenter.veeam.com/docs/vbo365/powershell/add-vborbacrole.html"
breadcrumb: "PowerShell Reference > Veeam Backup for Microsoft 365 PowerShell Reference > Restore Portal > Add-VBORbacRole"
dateModified: "2026-08-21"
---

# Add-VBORbacRole

## Short Description
Adds a restore operator role to Veeam Backup for Microsoft 365.

## Syntax

This cmdlet provides the following parameter sets:

<ul class="syntax-sets">
  <li>
    <p><code>SelectedBackupItemsParameterSet (Default)</code></p>

```
Add-VBORbacRole -Organization <VBOOrganization> -Name <String> [-Description <String>]
 -Operators <VBORbacOperator[]> -SelectedItems <VBORbacRoleItem[]> [-ExcludedItems <VBORbacRoleItem[]>] [<CommonParameters>]
```
  </li>
  <li>
    <p><code>AllBackupItemsParameterSet</code></p>

```
Add-VBORbacRole -Organization <VBOOrganization> -Name <String> [-Description <String>]
 -Operators <VBORbacOperator[]> [-EntireOrganization] [-ExcludedItems <VBORbacRoleItem[]>] [<CommonParameters>]
```
  </li>
</ul>

## Detailed Description
This cmdlet adds a restore operator role to Veeam Backup for Microsoft 365. When you add a restore operator role, you assign permissions to restore operators to explore and restore data from backups created by Veeam Backup for Microsoft 365 for specific organization object types (users, groups, sites, teams, or the entire Microsoft 365 organization).

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Description</span></p>
        </td>
        <td>
          <p>Specifies a description of the restore operator role.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">EntireOrganization</span></p>
        </td>
        <td>
          <p>Defines that the specified restore operators will be able to explore and restore all objects within the specified Microsoft 365 organization.</p><p>Default: <em>False</em></p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">ExcludedItems</span></p>
        </td>
        <td>
          <p>Specifies an array of objects to exclude. The cmdlet will add a restore operator role in which the specified restore operators are not allowed to explore and restore backed-up data of these objects.</p><p><strong>Note</strong>: You cannot exclude objects that have been specified for the <code>SelectedItems</code> parameter.</p><p>Accepts the <a href="vborbacroleitem.md"><code>VBORbacRoleItem</code></a><code>[]</code> object.</p><p>To create this object, run the <a href="new-vborbacroleitem.md"><code>New-VBORbacRoleItem</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vborbacroleitem.md"><code>VBORbacRoleItem[]</code></a></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Name</span></p>
        </td>
        <td>
          <p>Specifies a restore operator role name. The cmdlet will add a restore operator role with this name.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Operators</span></p>
        </td>
        <td>
          <p>Specifies an array of restore operators. The cmdlet will assign permissions to these objects.</p><p>Accepts the <a href="vborbacoperator.md"><code>VBORbacOperator</code></a><code>[]</code> object.</p><p>To create this object, run the <a href="new-vborbacoperator.md"><code>New-VBORbacOperator</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vborbacoperator.md"><code>VBORbacOperator[]</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Organization</span></p>
        </td>
        <td>
          <p>Specifies a Microsoft organization. The cmdlet will add a restore operator role to the specified Microsoft organization.</p><p><strong>Note</strong>: The organization must be a Microsoft 365 organization with modern app-only authentication or hybrid organization.</p><p>Accepts the <a href="vboorganization.md"><code>VBOOrganization</code></a> object.</p><p>To get this object, run the <a href="get-vboorganization.md"><code>Get-VBOOrganization</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vboorganization.md"><code>VBOOrganization</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">SelectedItems</span></p>
        </td>
        <td>
          <p>Specifies an array of objects to manage. The cmdlet will add a restore operator role in which the specified restore operators are allowed to explore and restore backed-up data of these objects.</p><p>Accepts the <a href="vborbacroleitem.md"><code>VBORbacRoleItem</code></a><code>[]</code> object.</p><p>To create this object, run the <a href="new-vborbacroleitem.md"><code>New-VBORbacRoleItem</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vborbacroleitem.md"><code>VBORbacRoleItem[]</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see the [About Common Parameters](http://go.microsoft.com/fwlink/p/?LinkID=113216) section of Microsoft Learn.

## Output Object
The cmdlet returns the [`VBOOperatorRole`](vbooperatorrole.md) object that contains the restore operator role settings.

## Examples

::: example
### Adding Restore Operator Role to Microsoft Organization

This example shows how add a restore operator role:

- Define an organization group with the display name *UsersAlpha* as a restore operator of the organization with the name *ABC*.
- Define all organization users with a name starting with *A* as objects to manage.
- Define all organization users with a name starting with *B* as objects to exclude.

```
$org = Get-VBOOrganization -Name "ABC"
$Group = Get-VBOOrganizationGroup -Organization $org -DisplayName "UsersAlpha"
$restoreoperator = New-VBORbacOperator -Group $Group
$UserA = Get-VBOOrganizationUser -Organization $org -DisplayName "A*"
$selecteditems = New-VBORbacRoleItem -User $UserA
$UserB = Get-VBOOrganizationUser -Organization $org -DisplayName "B*"
$excludeditems = New-VBORbacRoleItem -User $UserB
Add-VBORbacRole -Organization $org -Name "ABC Restore Operators" -Operators $restoreoperator -SelectedItems $selecteditems -ExcludedItems $excludeditems
```

Perform the following steps:

1. Run the [`Get-VBOOrganization`](get-vboorganization.md) cmdlet with the `Name` parameter to get the organization with the name *ABC*. Save the result to the `$org` variable.
2. Run the [`Get-VBOOrganizationGroup`](get-vboorganizationgroup.md) cmdlet with the `$org` variable and the `DisplayName` parameter to get an organization group with the display name *UsersAlpha*. Save the result to the `$Group` variable.
3. Run the [`New-VBORbacOperator`](new-vborbacoperator.md) cmdlet. Set the `$Group` variable as the `Group` parameter value. Save the result to the `$restoreoperator` variable.
4. Run the [`Get-VBOOrganizationUser`](get-vboorganizationuser.md) cmdlet with the `$org` variable and the `A*` value for the `DisplayName` parameter to get all organization users with a name starting with *A*. Save the result to the `$UserA` variable.
5. Run the [`New-VBORbacRoleItem`](new-vborbacroleitem.md) cmdlet. Set the `$UserA` variable as the `User` parameter value. Save the result to the `$selecteditems` variable.
6. Run the [`Get-VBOOrganizationUser`](get-vboorganizationuser.md) cmdlet with the `$org` variable and the `B*` value for the `DisplayName` parameter to get all organization users with a name starting with *B*. Save the result to the `$UserB` variable.
7. Run the [`New-VBORbacRoleItem`](new-vborbacroleitem.md) cmdlet. Set the `$UserB` variable as the `User` parameter value. Save the result to the `$excludeditems` variable.
8. Run the `Add-VBORbacRole` cmdlet. Specify the following settings:

   - Set the `$org` variable as the `Organization` parameter value. 
   - Specify the `Name` parameter value. 
   - Set the `$restoreoperator` variable as the `Operators` parameter value.
   - Set the `$selecteditems` variable as the `SelectedItems` parameter value.
   - Set the `$excludeditems` variable as the `ExcludedItems` parameter value.

:::

## Related Commands

- [`Get-VBOOrganization`](get-vboorganization.md)
- [`Get-VBOOrganizationGroup`](get-vboorganizationgroup.md)
- [`Get-VBOOrganizationUser`](get-vboorganizationuser.md)
- [`New-VBORbacOperator`](new-vborbacoperator.md)
- [`New-VBORbacRoleItem`](new-vborbacroleitem.md)