Permissions
For general requirements for permissions that must be provided to the user account to install and work with Veeam Backup & Replication, see Permissions for Veeam Backup & Replication. In addition to general requirements, make sure that user accounts have the following permissions:
Permissions for MongoDB Replica Set
Operation | Required Roles and Permissions |
|---|---|
Connecting to the MongoDB replica set, discovering MongoDB nodes | To connect to the MongoDB replica set, your credentials must meet the following requirements:
To learn more about these roles, see MongoDB documentation.
To learn more about TLS support by MongoDB, see MongoDB documentation. For details, see Specify Deployments. |
Connecting to MongoDB nodes, installing and updating Veeam components | The account specified in the protection group configuration settings to connect to MongoDB nodes must have the following permissions:
For enhanced security, we recommend creating a separate standard user that will be solely dedicated to performing the backup and restore operations. For details, see Specify Computers. |
Restoring MongoDB data | To restore MongoDB data using Veeam Explorer for MongoDB, consider the required permissions in the Permissions section of Veeam Explorers User Guide. |
Permissions for Object Storage
The general permissions for backup to object storage are listed in Using Object Storage Repositories. Additional permissions are required if you want to use MongoDB Backup. The list of additional permissions differs depending on the selected object storage and the way you set your backup infrastructure:
- Amazon S3
- S3 compatible (including IBM Cloud Object Storage and Wasabi Cloud Storage)
- Google Cloud Storage
Consider the following:
- Make sure the user account you are using has access to Amazon buckets and folders.
- The ListAllMyBuckets permission is not required if you specify the bucket name explicitly at the Bucket step of the New Object Repository wizard.
- If you plan to use Amazon S3 storage with immutability enabled, see permissions required for immutability in Using Object Storage Repositories. For details about immutability, see Immutability for Object Storage Repositories.
Make sure that your infrastructure configuration fits the following description:
- You plan to back up data to the Amazon S3 storage.
- You selected direct connection in the object storage settings. For details, see Adding Amazon S3 Object Storage.
If you plan to back up data using such infrastructure configuration, make sure the user account that you use to connect to the object storage has the following permissions:
{ |
S3 Compatible (Including IBM Cloud Object Storage, Wasabi Cloud Storage)
Consider the following:
- Make sure the user account you are using has access to Amazon buckets and folders.
- The ListAllMyBuckets permission is not required if you specify the bucket name explicitly at the Bucket step of the New Object Repository wizard.
- If you plan to use Amazon S3 storage with immutability enabled, see permissions required for immutability in Using Object Storage Repositories . For details about immutability, see Immutability for Object Storage Repositories.
Make sure that your infrastructure configuration fits the following description:
- You plan to back up data to the S3 compatible storage.
- Direct connection is selected in the object storage settings. For details, see Specify Object Storage Account.
- The Provided by IAM/STS object storage capabilities option is selected for the object storage. For details, see Managing Permissions for S3 Compatible Object Storage.
If you plan to back up data using such infrastructure configuration, make sure the user account that you use to connect to the object storage has the following permissions:
{ |
Make sure that your infrastructure configuration fits the following description:
- You plan to back up data to the Google Cloud storage.
- You configured Helper Appliance in the object storage settings. For details, see Configuring Helper Appliance.
- You selected direct connection in the object storage settings. For details, see Specify Object Storage Account.
If you plan to back up data using such infrastructure configuration, make sure the user account that you specify in the Helper Appliance settings has the following permissions:
{ |