Configuring Users

Users with Host Administrator permissions can perform the following operations related to configuring local Veeam Software Appliance users:

Users with Security Officer permissions cannot configure local users.

Note

When configuring users, consider the following:

If you have multi-factor authentication enabled, you must enter a one-time password before you can perform the following operations on Host Administrator accounts: create, edit, or remove users, assign roles, or reset multi-factor authentication. Authentication remains valid for 15 minutes.
A Host Administrator can enable or disable multi-factor authentication for other users at any time, including multi-factor authentication that was disabled during initial configuration. After you enable MFA, users are prompted to set it up at their next login. For more information, see Managing User Authentication.

User Roles

The following table describes roles you can assign to the local users.

User Roles
Role	Description
Host Administrator	Can perform all administrative activities in the Veeam Host Management web UI and TUI: Configure network settings Configure server time settings Configure remote access settings Manage users and roles Configure backup infrastructure integrations Manage software updates Perform maintenance tasks The default Host Administrator account is veeamadmin.
Security Officer	Can perform the following operations in the Veeam Host Management web UI: Reset user passwords Reset user multi-factor authentication Manage authorization requests Manage password recovery tokens Manage configuration backups Export events Security Officer does not have access to the Veeam Host Management TUI. The default Security Officer account is veeamso.
User	Manages backup and restore operations in accordance with the assigned backup server role. Use this role to create backup console users when the Veeam Software Appliance is not joined to a domain. User must reset their password at first sign-in. Has limited permissions to the system and no access to the Veeam Host Management console.

Creating Users

To create a new user, perform the following steps:

Log in to the Veeam Host Management web UI as a Host Administrator.
In the management pane, click Users and Roles.
Click Add.
At the User step of the wizard, specify the name of the user, a password, and a description.

Note

Consider the following:

15 characters minimum.
1 upper case character.
1 lower case character.
1 numeric character.
1 special character.
No more than 4 characters of the same class in a row. For example, more than 4 lowercase or 4 numerical characters in sequence.

By default, passwords stay valid for 60 days, after which a user must set a new password that meets the listed requirements. A Host Administrator can change this interval or disable password expiration. For more information, see Managing User Authentication.
After you add the user, you cannot change its name.

Click Next.
At the Role step of the wizard, select a role and click Next. You can assign only one role to the user.
At the MFA step of the wizard, enable or disable multi-factor authentication for the user and click Next.

Note

Consider the following:

If you add a user with the Security Officer role, you cannot disable MFA on that account.
If you add a user with the User role, this step will be skipped.

Editing Users

To edit a user, perform the following steps:

Log in to the Veeam Host Management web UI as a Host Administrator.
In the management pane, click Users and Roles.
Click Edit.
Change the description and roles if necessary. For Host Administrator accounts, you can also enable or disable multi-factor authentication.
Review the data and click Finish.

Removing Users

To remove a user, perform the following steps:

Note

You cannot remove the default veeamadmin and veeamso user accounts.