Configuring Users

Users with Host Administrator permissions can perform the following operations related to configuring users:

  • Add, edit, and remove users
  • Unlock users
  • Reset user passwords
  • Enable and disable multi-factor authentication
  • Reset multi-factor authentication

Users with Security Officer permissions can only approve authorization requests to reset user passwords. For more information, see Performing Security Officer Tasks.

User Roles

The following table describes roles you can assign to users.

Role

Description

Host Administrator

Can perform all administrative activities in the Veeam Host Management web UI and TUI:

  • Configure network settings
  • Configure server time settings
  • Configure remote access settings
  • Configure users
  • Configure backup infrastructure integrations
  • Manage software updates
  • Perform maintenance tasks

The default Host Administrator account is veeamadmin.

Security Officer

Can perform the following operations in the Veeam Host Management web UI:

  • Reset user passwords
  • Manage authorization requests
  • Manage password recovery tokens
  • Manage configuration backups
  • Export events

Security Officer does not have access to the Veeam Host Management TUI and Veeam Backup & Replication.

The default Security Officer account is veeamso.

User

Can be assigned to local Veeam appliance users. Has limited permissions to the system without access to the Veeam Host Management console. If your Veeam Backup & Replication server is not a part of the domain, you can add a user account with this role in the Veeam Backup & Replication console and assign a Veeam Backup & Replication role to this account.

Service Account

Can be assigned to local Veeam appliance users. Has limited permissions to the system without access to the Veeam Host Management console. If your Veeam Backup & Replication server is not a part of the domain, you can add a user account with this role in the Veeam Backup & Replication console, assign a Veeam Backup & Replication role to this account, and use it as a service account.

Adding Users

To add a new user, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Click Add.
  4. At the User step of the wizard, specify the name of the user, a password, and a description.

Note

Consider the following:

  • The password must meet the following requirements:
    • 15 characters minimum.
    • 1 upper case character.
    • 1 lower case character.
    • 1 numeric character.
    • 1 special character.
    • No more than 3 characters of the same class in a row. For example, more than 3 lowercase or 3 numerical characters in sequence.
  • After you add the user, you cannot change its name.
  1. Click Next.
  2. At the Role step of the wizard, select the role and click Next. You can assign only one role to the user.
  3. At the MFA step of the wizard, enable or disable multi-factor authentication for the user and click Next.

Note

Consider the following:

  • If you add a user with the Security Officer role, you cannot disable MFA.
  • If you add a user with the User or Service Account role, this step will be skipped.
  1. At the Summary step of the wizard, review the data and click Finish.

Users with the Host Administrator role are automatically added to Veeam Backup & Replication with the backup administrator permissions

Configuring Users 

Editing Users

To edit a user, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Click Edit.
  4. Change the description and the role if necessary. For Host Administrator accounts, you can also enable or disable multi-factor authentication.
  5. Review the data and click Finish.

Configuring Users 

Removing Users

To remove a user, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Select the user, click Remove and confirm the operation.

Note

You cannot remove the default veeamadmin and veeamso user accounts.

Configuring Users 

Unlocking Users

User accounts are locked after three failed login attempts. To unlock the user account, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Select the user.
  4. Click Settings > Unlock user.

You can also unlock the user by resetting the password. For more information, see Resetting Passwords.

Configuring Users 

Resetting Passwords

To reset the user account password as a Host Administrator, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Select the user.
  4. Click Settings > Change password.
  5. Specify a new password and click Apply.

Configuring Users 

As a Host Administrator, you can reset your password in the Veeam Host Management web UI or TUI. To do this, perform the following steps:

  • In the Veeam Host Management web UI, do the following:
    1. In the main menu, click Users and Roles.
    2. Select the user.
    3. Click Settings > Change password.
    4. Specify the current password and a new password and click Apply.

Configuring Users 

  • In the Veeam Host Management TUI, do the following:
    1. In the main menu, select Change password.
    2. Specify a new password and press [Enter].

Configuring Users 

If the only Host Administrator is locked or you forgot the password, you can unlock the account in one of the following ways:

  • If you configured the Security Officer account during the Veeam appliance installation, you can reset the Host Administrator password through the authorization request. To do this, click Forgot password? in the Veeam Host Management web UI sign-in page, specify your user name and click Submit.

Configuring Users 

  • If you did not configure the Security Officer account, boot from the Veeam LiveCD to reset the Host Administrator password. For more information, see this KB article.

Managing Multi-Factor Authentication

To enable or disable multi-factor authentication for Host Administrator accounts, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Select the user.
  4. Click Settings > Enable MFA or Disable MFA.

Configuring Users 

To reset multi-factor authentication for Host Administrator or Security Officer accounts, perform the following steps:

  1. Log in to the Veeam Host Management web UI.
  2. In the main menu, click Users and Roles.
  3. Select the user.
  4. Click Settings > Reset MFA.

Configuring Users 

Page updated 9/3/2025

Page content applies to build 13.0.0.4967