Configuring Users
Users with Host Administrator permissions can perform the following operations related to configuring users:
- Add, edit, and remove users
- Unlock users
- Reset user passwords
- Enable and disable multi-factor authentication
- Reset multi-factor authentication
Users with Security Officer permissions can only approve authorization requests to reset user passwords. For more information, see Performing Security Officer Tasks.
User Roles
The following table describes roles you can assign to users.
Role | Description |
|---|---|
Host Administrator | Can perform all administrative activities in the Veeam Host Management web UI and TUI:
The default Host Administrator account is veeamadmin. |
Security Officer | Can perform the following operations in the Veeam Host Management web UI:
Security Officer does not have access to the Veeam Host Management TUI and Veeam Backup & Replication. The default Security Officer account is veeamso. |
User | Can be assigned to local Veeam appliance users. Has limited permissions to the system without access to the Veeam Host Management console. If your Veeam Backup & Replication server is not a part of the domain, you can add a user account with this role in the Veeam Backup & Replication console and assign a Veeam Backup & Replication role to this account. |
Service Account | Can be assigned to local Veeam appliance users. Has limited permissions to the system without access to the Veeam Host Management console. If your Veeam Backup & Replication server is not a part of the domain, you can add a user account with this role in the Veeam Backup & Replication console, assign a Veeam Backup & Replication role to this account, and use it as a service account. |
Adding Users
To add a new user, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Click Add.
- At the User step of the wizard, specify the name of the user, a password, and a description.
Note |
Consider the following:
|
- Click Next.
- At the Role step of the wizard, select the role and click Next. You can assign only one role to the user.
- At the MFA step of the wizard, enable or disable multi-factor authentication for the user and click Next.
Note |
Consider the following:
|
- At the Summary step of the wizard, review the data and click Finish.
Users with the Host Administrator role are automatically added to Veeam Backup & Replication with the backup administrator permissions
Editing Users
To edit a user, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Click Edit.
- Change the description and the role if necessary. For Host Administrator accounts, you can also enable or disable multi-factor authentication.
- Review the data and click Finish.
Removing Users
To remove a user, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Select the user, click Remove and confirm the operation.
Note |
You cannot remove the default veeamadmin and veeamso user accounts. |
User accounts are locked after three failed login attempts. To unlock the user account, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Select the user.
- Click Settings > Unlock user.
You can also unlock the user by resetting the password. For more information, see Resetting Passwords.
To reset the user account password as a Host Administrator, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Select the user.
- Click Settings > Change password.
- Specify a new password and click Apply.
Note |
A Host Administrator cannot reset passwords for Security Officers. To do this, a Security Officer must use a recovery token. For more information, see Using Recovery Token. |
As a Host Administrator, you can reset your password in the Veeam Host Management web UI or TUI. To do this, perform the following steps:
- In the Veeam Host Management web UI, do the following:
- In the main menu, click Users and Roles.
- Select the user.
- Click Settings > Change password.
- Specify the current password and a new password and click Apply.
- In the Veeam Host Management TUI, do the following:
- In the main menu, select Change password.
- Specify a new password and press [Enter].
If the only Host Administrator is locked or you forgot the password, you can unlock the account in one of the following ways:
- If you configured the Security Officer account during the Veeam appliance installation, you can reset the Host Administrator password through the authorization request. To do this, click Forgot password? in the Veeam Host Management web UI sign-in page, specify your user name and click Submit.
- If you did not configure the Security Officer account, boot from the Veeam LiveCD to reset the Host Administrator password. For more information, see this KB article.
Managing Multi-Factor Authentication
To enable or disable multi-factor authentication for Host Administrator accounts, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Select the user.
- Click Settings > Enable MFA or Disable MFA.
Note |
A Host Administrator cannot reset multi-factor authentication for Security Officers. To do this, a Security Officer must use a recovery token. For more information, see Using Recovery Token. |
To reset multi-factor authentication for Host Administrator accounts, perform the following steps:
- Log in to the Veeam Host Management web UI.
- In the main menu, click Users and Roles.
- Select the user.
- Click Settings > Reset MFA.
