Configuring Users

Users with Host Administrator permissions can perform the following operations related to configuring local Veeam appliance users:

Create, edit, and remove user accounts
Assign roles
Enable and disable multi-factor authentication

Users with Security Officer permissions cannot configure local users.

User Roles

The following table describes roles you can assign to the local users.

Role	Description
Host Administrator	Can perform all administrative activities in the Veeam Host Management web UI and TUI: Configure network settings Configure server time settings Configure remote access settings Manage users and roles Configure backup infrastructure integrations Manage software updates Perform maintenance tasks The default Host Administrator account is veeamadmin.
Security Officer	Can perform the following operations in the Veeam Host Management web UI: Reset user passwords Reset user multi-factor authentication Manage authorization requests Manage password recovery tokens Manage configuration backups Export events Security Officer does not have access to the Veeam Host Management TUI. The default Security Officer account is veeamso.
User	Has limited permissions to the system without access to the Veeam Host Management console.
Service Account	Has limited permissions to the system without access to the Veeam Host Management console.

Note

You can add local Veeam Software Appliance users to the Veeam Backup & Replication console and assign a Veeam Backup & Replication role to them. Multi-factor authentication settings for these users apply independently. For example, if you enable multi-factor authentication for the user in the Veeam Host Management console, it will not affect the Veeam Backup & Replication console.

Users with the Service Account role can be used in Veeam Backup & Replication by applications and backup infrastructure components for non-interactive connections.

Creating Users

To create a new user, perform the following steps:

Log in to the Veeam Host Management web UI.
In the management pane, click Users and Roles.
Click Add.
At the User step of the wizard, specify the name of the user, a password, and a description.

Note

Consider the following:

The password must meet the following requirements:

15 characters minimum.
1 upper case character.
1 lower case character.
1 numeric character.
1 special character.
No more than 3 characters of the same class in a row. For example, more than 3 lowercase or 3 numerical characters in sequence.

Passwords stay valid for 60 days. When a password expires, a user will need to specify a new one that follows requirements.
After you add the user, you cannot change its name.

Click Next.
At the Role step of the wizard, select the role and click Next. You can assign only one role to the user.
At the MFA step of the wizard, enable or disable multi-factor authentication for the user and click Next.

Note

Consider the following:

If you add a user with the Security Officer role, you cannot disable MFA.
If you add a user with the User or Service Account role, this step will be skipped.

At the Summary step of the wizard, review the data and click Finish.

Editing Users

To edit a user, perform the following steps:

Log in to the Veeam Host Management web UI.
In the management pane, click Users and Roles.
Click Edit.
Change the description and the role if necessary. For Host Administrator accounts, you can also enable or disable multi-factor authentication.
Review the data and click Finish.