Performing Security Officer Tasks

Users with Security Officer permissions can perform the following tasks in the Veeam Host Management web UI:

• Approve or decline authorization requests
• Reset own password
• Reset password recovery token
• View and export Veeam Host Management events
• Manage configuration backup passphrases

Managing Authorization Requests

You can approve or decline the following requests from Host Administrators:

• Enable SSH
• Grant temporary root access
• User password reset
• Change domain membership
• Add a Security Officer account
• Allow remote connections for Veeam Agents
• Enable and disable backup infrastructure lockdown
• Approve pairing requests

To manage authorization requests, perform the following steps:

1. Log in to the Veeam Host Management web UI.
2. In the main menu, click Overview.
3. Select the request and click Approve or Decline.

Resetting Own Password

As a Security Officer, you can reset your password in the Veeam Host Management web UI. To do this, perform the following steps:

1. In the main menu, click Overview.
2. Click Change password.
3. Specify the current password and a new password and click Apply.

Resetting Password Recovery Tokens

You can reset your current password recovery token. To do this, perform the following steps:

1. In the main menu, click Overview.
2. Click Create password recovery token and confirm the operation.
3. Enter a 6-digit confirmation code generated in the mobile authenticator application.
4. Copy new recovery token and save it in a secure place.

Viewing Events

You can monitor system, security, configuration and other types of events occurred on the Veeam appliance. To view the list of events, click Events in the main menu.

To export all events in the CSV format, click Export.

Managing Configuration Backup Passphrases

You can change current configuration backup passphrase. To do this, perform the following steps:

1. In the main menu, click Configuration.
2. In the Configuration Backup section, click Change passphrase.
3. Specify new passphrase and hint.
4. Click OK.

If you have a configuration backup passphrase from the previous backup server, you can add it to restore configuration. To do this, perform the following steps:

1. In the main menu, click Configuration.
2. In the Configuration Restore section, click Add.
3. Specify a passphrase and a hint.
4. Click OK.