---
title: "New-VBRNASPermissionSet"
description: "The cmdlet creates a permission set for instant restore of file share backups that will be used if the file share backup does not contain security information."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/new-vbrnaspermissionset.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Unstructured Data Backup > Unstructured Data Recovery > New-VBRNASPermissionSet"
dateModified: "2026-08-19"
---

# New-VBRNASPermissionSet

## Short Description
Creates a permission set for instant restore of file share backups that will be used if the file share backup does not contain security information.

**Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License

## Syntax

This cmdlet provides the following parameter sets:

<ul class="syntax-sets">
  <li>
    <p><code>PermissionsAllowAll (Default)</code></p>

```
New-VBRNASPermissionSet [-RestorePoint] <VBRUnstructuredBackupRestorePoint[]> [-Owner] <String>
 [-AllowEveryone] [-Server <CHost>] [-UseLinuxLocalUser] [<CommonParameters>]
```
  </li>
  <li>
    <p><code>PermissionsDenyAll</code></p>

```
New-VBRNASPermissionSet [-RestorePoint] <VBRUnstructuredBackupRestorePoint[]> [-Owner] <String> [-DenyEveryone]
 [-Server <CHost>] [-UseLinuxLocalUser] [<CommonParameters>]
```
  </li>
  <li>
    <p><code>PermissionsAllowSelected</code></p>

```
New-VBRNASPermissionSet [-RestorePoint] <VBRUnstructuredBackupRestorePoint[]> [-Owner] <String>
 [-AllowSelected] -PermissionScope <String[]> [-Server <CHost>] [-UseLinuxLocalUser] [<CommonParameters>]
```
  </li>
</ul>

## Detailed Description
The cmdlet creates a permission set for instant restore of file share backups that will be used if the file share backup does not contain security information.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">AllowEveryone</span></p>
        </td>
        <td>
          <p>Defines that the permission set will allow access to the published SMB share to everyone.</p><p><strong>Note</strong>: If the <code>DenyEveryone</code>, <code>AllowSelected</code>, or <code>AllowEveryone</code> parameter is not specified, the cmdlet will use the <code>AllowEveryone</code> parameter by default.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">AllowSelected</span></p>
        </td>
        <td>
          <p>Defines that the permission set will allow access to the published SMB share to the limited number of users specified in the <code>PermissionScope</code> parameter. This parameter must be specified together with the <code>PermissionScope</code> parameter.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">DenyEveryone</span></p>
        </td>
        <td>
          <p>Defines that the permission set will deny access to the published SMB share to everyone except its owner.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Owner</span></p>
        </td>
        <td>
          <p>Specifies a name of the account or group in the user name or domain\\user name format. The cmdlet will use this parameter if the file share backup does not contain security information.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>1</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">PermissionScope</span></p>
        </td>
        <td>
          <p>Specifies an array of users. The cmdlet will provide these users with the access to the published SMB share. This parameter must be specified together with the <code>AllowSelected</code> parameter.</p>
        </td>
        <td style="width:10%;">
          <p><code>String[]</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">RestorePoint</span></p>
        </td>
        <td>
          <p>Specifies an array of restore points. The cmdlet will create a permission set with specific security settings for each of the specified restore points.</p><p>Accepts the <code>VBRUnstructuredBackupRestorePoint[]</code> object. To get this object, run the <a href="get-vbrunstructuredbackuprestorepoint.md"><code>Get-VBRUnstructuredBackupRestorePoint</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredBackupRestorePoint[]</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>0</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Server</span></p>
        </td>
        <td>
          <p>Specifies the Linux mount server which local user account you want to use.</p><p>Accepts the <code>CHost</code> object. To get this object, run the <a href="get-vbrserver.md"><code>Get-VBRServer</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>CHost</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">UseLinuxLocalUser</span></p>
        </td>
        <td>
          <p>Defines that the permission set will use the Linux local user account.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
The cmdlet returns a `VBRNASPermissionSet` object for each specified restore point. This object defines permission settings that will be applied to instant restore of file share backups.

## Examples

::: example
### Example 1. Creating Permission Set to Deny Access to SMB Share to Everyone Except Owner

The following request creates a permission set that denies access to the published SMB share to everyone except its owner.

```
$backup = Get-VBRUnstructuredBackup -Name "Daily SMB1 Backup"
$nasBackupPoint = Get-VBRUnstructuredBackupRestorePoint -NASBackup $backup
$permissions = New-VBRNASPermissionSet -RestorePoint $nasBackupPoint[0] -Owner "User 1" -DenyEveryone
```

Perform the following steps:

1. Run the [`Get-VBRUnstructuredBackup`](get-vbrunstructuredbackup.md) cmdlet. Specify the `Name` parameter value. Save the result to the `$backup` variable.
2. Run the [`Get-VBRUnstructuredBackupRestorePoint`](get-vbrunstructuredbackuprestorepoint.md) cmdlet. Set the `$backup` variable as the `NASBackup` parameter value. Save the result to the `$nasBackupPoint` variable.
3. Run the `New-VBRNASPermissionSet` cmdlet. Specify the following parameters:

   - Specify the first value from the array returned to the `$nasBackupPoint` variable as the `RestorePoint` parameter.
   - Specify the `Owner` parameter value.
   - Provide the `DenyEveryone` parameter.
   - Save the result to the `$permissions` variable.

:::

::: example
### Example 2. Creating Permission Set to Allow Access to SMB Share to Everyone

The following request creates a permission set that allows access to the published SMB share to everyone.

```
$backup = Get-VBRUnstructuredBackup -Name "Daily SMB1 Backup"
$nasBackupPoint = Get-VBRUnstructuredBackupRestorePoint -NASBackup $backup
$permissions = New-VBRNASPermissionSet -RestorePoint $nasBackupPoint[0] -Owner "User 1" -AllowEveryone
```

Perform the following steps:

1. Run the [`Get-VBRUnstructuredBackup`](get-vbrunstructuredbackup.md) cmdlet. Specify the `Name` parameter value. Save the result to the `$backup` variable.
2. Run the [`Get-VBRUnstructuredBackupRestorePoint`](get-vbrunstructuredbackuprestorepoint.md) cmdlet. Set the `$backup` variable as the `NASBackup` parameter value. Save the result to the `$nasBackupPoint` variable.
3. Run the `New-VBRNASPermissionSet` cmdlet. Specify the following parameters:

   - Specify the first value from the array returned to the `$nasBackupPoint` variable as the `RestorePoint` parameter.
   - Specify the `Owner` parameter value.
   - Provide the `AllowEveryone` parameter.
   - Save the result to the `$permissions` variable.

:::

::: example
### Example 3. Creating Permission Set to Allow Access to SMB Share to Selected Users

The following request creates a permission set that allows access to the published SMB share to selected users.

```
$backup = Get-VBRUnstructuredBackup -Name "Daily SMB1 Backup"
$nasBackupPoint = Get-VBRUnstructuredBackupRestorePoint -NASBackup $backup
$permissions = New-VBRNASPermissionSet -RestorePoint $nasBackupPoint[0] -Owner "User 1" -AllowSelected -PermissionScope ("domain\user 2")
```

Perform the following steps:

1. Run the [`Get-VBRUnstructuredBackup`](get-vbrunstructuredbackup.md) cmdlet. Specify the `Name` parameter value. Save the result to the `$backup` variable.
2. Run the [`Get-VBRUnstructuredBackupRestorePoint`](get-vbrunstructuredbackuprestorepoint.md) cmdlet. Set the `$backup` variable as the `NASBackup` parameter value. Save the result to the `$nasBackupPoint` variable.
3. Run the `New-VBRNASPermissionSet` cmdlet. Specify the following parameters:

   - Specify the first value from the array returned to the `$nasBackupPoint` variable as the `RestorePoint` parameter.
   - Specify the `Owner` parameter value.
   - Provide the `AllowSelected` parameter.
   - Specify the `PermissionScope` parameter.
   - Save the result to the `$permissions` variable.

:::

## Related Commands

- [`Get-VBRUnstructuredBackup`](get-vbrunstructuredbackup.md)
- [`Get-VBRUnstructuredBackupRestorePoint`](get-vbrnasbackuprestorepoint.md)