---
title: "SureBackup"
description: "Below are vCenter Server granular permissions required for SureBackup: 1 Required if encryption policies are used"
canonical: "https://helpcenter.veeam.com/docs/vbr/permissions/surebackup.html"
breadcrumb: "Permissions for VMware vSphere > SureBackup"
dateModified: "2026-10-01"
---

# SureBackup

Below are vCenter Server granular permissions required for SureBackup:

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th colspan="2">
      <p>Privilege Level</p>
    </th>
    <th>
      <p>Required Permissions</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Cryptographic operations</span><span style="font-size:7pt; vertical-align:super;" class="Table_Text_Bold">1</span></p>
    </td>
    <td>
      <p>Register VM</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">dvPort Group</span></p>
    </td>
    <td>
      <p>Create<br/>Delete</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Datastore</span></p>
    </td>
    <td>
      <p>Browse datastore<br/>Low-level file operations<br/>Remove file <br/>Configure datastore (if you restore to vSAN datastore)</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Folder</span></p>
    </td>
    <td>
      <p>Create folder<br/>Delete folder</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Global</span></p>
    </td>
    <td>
      <p>Licenses<br/>Log event</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Host</span></p>
    </td>
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Configuration</span></p>
    </td>
    <td>
      <p>Network configuration<br/>Storage partition configuration</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Network</span></p>
    </td>
    <td>
      <p>Assign network</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td colspan="2">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Resource</span></p>
    </td>
    <td>
      <p>Assign virtual machine to resource pool<br/>Create resource pool<br/>Remove resource pool</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td rowspan="5">
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Virtual Machine</span></p>
    </td>
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Change Configuration</span></p>
    </td>
    <td>
      <p>Add or remove device<br/>Advanced configuration<br/>Modify device settings*<br/>Toggle disk change tracking*</p>
      <p>* <span class="Small_Text">For virtual labs with VMware Distributed vSwitch (DVS).</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Edit Inventory</span></p>
    </td>
    <td>
      <p>Register<br/>Remove<br/>Unregister</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Interaction</span></p>
    </td>
    <td>
      <p>Power Off<br/>Power On</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Provisioning</span></p>
    </td>
    <td>
      <p>Allow disk access</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p class="Table_Text_Bold"><span class="Table_Text_Bold">Snapshot Management</span></p>
    </td>
    <td>
      <p>Create snapshot<br/>Remove snapshot</p>
    </td>
  </tr>
</table>

[^1^ Required if encryption policies are used]{.Small_Text}