---
title: "Add-VBRUserRoleAssignment"
description: "Adds a role to a user or a user group. If the four-eyes authorization is enabled, you cannot run this cmdlet. For more information, see the Four-Eyes Authorization section in the User Guide for VMware vSphere."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/add-vbruserroleassignment.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Roles and Users > Add-VBRUserRoleAssignment"
dateModified: "2026-08-19"
---

# Add-VBRUserRoleAssignment

## Short Description
Adds a role to a user or a user group.

::: note

If the four-eyes authorization is enabled, you cannot run this cmdlet. For more information, see the [Four-Eyes Authorization](https://helpcenter.veeam.com/docs/vbr/userguide/four_eyes_authorization.html?ver=13) section in the User Guide for VMware vSphere.

:::

**Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License

## Syntax

This cmdlet provides the following parameter sets:

<ul class="syntax-sets">
  <li>
    <p><code>RoleEntity (Default)</code></p>

```
Add-VBRUserRoleAssignment -Name <String> -RoleEntity <VBRRoleEntity> [<CommonParameters>]
```
  </li>
  <li>
    <p><code>Role</code></p>

```
Add-VBRUserRoleAssignment -Name <String> -Role <VBRRole> [<CommonParameters>]
```
  </li>
</ul>

## Detailed Description
This cmdlet adds a role to a user or a user group. For more information on types of roles, see the [Roles and Users](https://helpcenter.veeam.com/docs/vbr/userguide/users_roles.html?ver=13) section of User Guide for VMware vSphere.

::: note

You cannot assign a custom role and a built-in role to the same user or user group.

:::

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Name</span></p>
        </td>
        <td>
          <p>Specifies a name of a user or a user group. The cmdlet will assign a role for this user or user group.</p><p><strong>Note</strong>: You must specify the name of a user or a user group in the <em>DOMAIN\Username</em> format.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Role</span></p>
        </td>
        <td>
          <p>Specifies a role that you want to assign to a user. You can assign one of the following roles:</p><ul><li><code>BackupOperator</code></li><li><code>RestoreOperator</code></li><li><code>BackupAdmin</code></li><li><code>TapeOperator</code></li><li><code>BackupViewer</code></li><li><code>IncidentApiOperator</code></li><li><code>SecurityAdministrator</code></li><li><code>Custom</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBRRole</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">RoleEntity</span></p>
        </td>
        <td>
          <p>Specifies roles. The cmdlet will assign these roles to the user or user group.</p><p>Accepts the <a href="vbrroleentity.md"><code>VBRRoleEntity</code></a> object. To get this object, run the <a href="get-vbrroleentity.md"><code>Get-VBRRoleEntity</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vbrroleentity.md"><code>VBRRoleEntity</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
The cmdlet returns the `VBRUserRoleAssignment` object that defines a role for a user or a user group

## Examples

::: example
### Example 1. Assigning Backup Operator Role to User

This command assigns the Backup Operator role to the `Tech\BackupAdmin` user. The cmdlet output will contain the following details: `RoleEntity`, `Role`, `Type`, `Name` and `Id`.

```
Add-VBRUserRoleAssignment -Name Tech\BackupAdmin -Role "BackupOperator"
RoleEntity : Backup Operator
Role       : BackupOperator
Type       : User
Name       : Tech\BackupAdmin
Id         : efd17c66-104a-4ef8-8b76-365ece476cef
```

:::

::: example
### Example 2. Assigning Tape Operator Role to User

This command assigns the Tape Operator role to the `Tech\TapeAdmin` user. The cmdlet output will contain the following details: `RoleEntity`, `Role`, `Type`, `Name` and `Id`.

```
Add-VBRUserRoleAssignment -Name Tech\TapeAdmin -Role TapeOperator
RoleEntity : Tape Operator
Role       : TapeOperator
Type       : User
Name       : Tech\TapeAdmin
Id         : b2c6a3d4-8f91-4e5a-9c3b-1a7d5e8f2b60
```

:::

::: example
### Example 3. Assigning Custom Role to User

This command assigns the `r1` custom role to the `k4` user. The cmdlet output will contain the following details: `RoleEntity`, `Role`, `Type`, `Name` and `Id`.

```
Add-VBRUserRoleAssignment -Name "k4" -RoleEntity (Get-VBRRoleEntity -Name "r1")
RoleEntity : r1
Role       : Custom
Type       : User
Name       : Tech\BackupAdmin
Id         : a1a5898b-5377-4c04-89e6-70abf0d5395b
```

:::

## Related Commands

[`Get-VBRRoleEntity`](get-vbrroleentity.md)