---
title: "Continuous Data Protection (CDP)"
description: "Below are vCenter Server granular permissions required for continuous data protection (CDP):"
canonical: "https://helpcenter.veeam.com/docs/vbr/permissions/cdp.html"
breadcrumb: "Permissions for VMware vSphere > Continuous Data Protection (CDP)"
dateModified: "2026-10-01"
---

# Continuous Data Protection (CDP)

Below are vCenter Server granular permissions required for continuous data protection (CDP):

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th colspan="2" style="width:167px;">
      <p>Privilege Level</p>
    </th>
    <th style="width:575px;">
      <p>Required Permissions</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Datastore</span></p>
    </td>
    <td style="width:575px;">
      <p>Allocate space<br/>Browse datastore<br/>Configure datastore<br/>Low-level file operations<br/>Remove file</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Datastore cluster</span></p>
    </td>
    <td style="width:575px;">
      <p>Configure a datastore cluster</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Global</span></p>
    </td>
    <td style="width:575px;">
      <p>Diagnostics<br/>Disable methods<br/>Enable methods<br/>Licenses<br/>Log event<br/>Manage custom attributes<br/>Set custom attribute</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:250px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Host</span></p>
    </td>
    <td style="width:250px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Configuration</span></p>
    </td>
    <td style="width:575px;">
      <p>Advanced settings<br/>Maintenance<br/>Query patch</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Network</span></p>
    </td>
    <td style="width:575px;">
      <p>Assign network</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Profile-driven storage (for VMware vSphere prior to 8.x)</span></p>
    </td>
    <td style="width:575px;">
      <p>Profile-driven storage update<br/>Profile-driven storage view</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">VM storage policies (for VMware starting from 8.x)</span></p>
    </td>
    <td style="width:575px;">
      <p>Apply VM storage policies<br/>Update VM storage policies<br/>View VM storage policies,<br/>View VM storage policy permissions</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Resource</span></p>
    </td>
    <td style="width:575px;">
      <p>Assign virtual machine to resource pool</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2" style="width:167px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">vApp</span></p>
    </td>
    <td style="width:575px;">
      <p>Add virtual machine<br/>Assign resource pool<br/>Unregister</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td rowspan="6">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Virtual Machine</span></p>
    </td>
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Change Configuration</span></p>
    </td>
    <td style="width:575px;">
      <p>Acquire disk lease<br/>Add existing disk<br/>Add new disk<br/>Advanced configuration<br/>Change settings<br/>Extend virtual disk<br/>Modify device settings<br/>Remove disk<br/>Toggle disk change tracking</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Edit Inventory</span></p>
    </td>
    <td style="width:575px;">
      <p>Register<br/>Remove</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Guest operations</span></p>
    </td>
    <td style="width:575px;">
      <p>Guest operation modifications<br/>Guest operation program execution<br/>Guest operation queries</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Interaction</span></p>
    </td>
    <td style="width:575px;">
      <p>Connect devices<br/>Guest operating system management by VIX API</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Provisioning</span></p>
    </td>
    <td style="width:575px;">
      <p>Allow disk access<br/>Allow read-only disk access<br/>Allow virtual machine download</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td style="width:139px;">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Snapshot Management</span></p>
    </td>
    <td style="width:575px;">
      <p>Create snapshot<br/>Remove snapshot<br/>Rename snapshot<br/>Revert to snapshot</p>
    </td>
  </tr>
</table>