User Roles

Veeam Data Cloud provides built-in roles that you can assign to Veeam Data Cloud users. User roles define the operations that the user can perform, including backup, restore and user management. You can assign a role with access to your entire Veeam Data Cloud organization or a specific workload, such as Microsoft Entra ID, Salesforce or Microsoft 365.

To view the list of available roles, click your user name in the top-right corner and then select Settings > Roles.

Veeam Data Cloud Organization Roles

You can assign the following roles to users to allow them to work with your Veeam Data Cloud organization.

• OrganizationAdmin — can manage users and perform all configuration actions, backup and restore operations. This role gives a user access to all workloads and tenants. The first user invited to your Veeam Data Cloud organization becomes OrganizationAdmin.
• OrganizationViewer — can view the lists of Veeam Data Cloud users and tenants. This role is granted for all Veeam Data Cloud users.

Entra ID Roles

You can assign the EntraID:Administrator role to users working with Veeam Data Cloud for Microsoft Entra ID. Users with the EntraID:Administrator role assigned can add tenants and perform all configuration actions, backup and restore operations. You can limit access to specific Entra ID tenants when assigning this role.

To prohibit a user with the EntraID:Administrator role to add tenants, limit access to specific Entra ID tenants when assigning this role and assign the user the OrganizationViewer role.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with EntraID:Administrator role assigned have the described permissions only within the specified scope of tenants.

Salesforce Roles

You can assign the following roles to users working with Veeam Data Cloud for Salesforce:

• Salesforce:Administrator — can add, rename and delete tenants and perform all configuration actions, backup and restore operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:BackupOperator — can add tenants, manage backup policies, manage protected data and perform all restore and archival operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:RestoreOperator — can only perform restore operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:Viewer — can monitor backup and restore processes without performing any operations. You can limit access to specific Salesforce tenants when assigning this role.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with Salesforce:Administrator, Salesforce:BackupOperator, Salesforce:RestoreOperator and Salesforce:Viewer roles assigned will have the described permissions only within the specified scope of tenants.

Microsoft 365 Roles

You can assign the following roles to users working with Veeam Data Cloud for Microsoft 365:

• M365:Administrator — can add and manage tenants and perform all configuration actions and backup and restore operations.
• M365:BackupOperator — can add and manage tenants and create and manage backup policies.
• M365:RestoreOperator — can view tenants and perform restore operations.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with the M365:Administrator, M365:BackupOperator and M365:RestoreOperator roles assigned have the described permissions only within the specified scope of tenants.

Veeam Data Cloud Vault Roles

You can assign the Vault:Administrator role to users working with Veeam Data Cloud for Microsoft Entra ID. Users with the Vault:Administrator role assigned can add tenants and perform all configuration actions, backup and restore operations. You can limit access to specific Veeam Data Cloud Vault tenants when assigning this role.

To prohibit a user with the Vault:Administrator role to add tenants, limit access to specific Veeam Data Cloud Vault tenants when assigning this role and assign the user the OrganizationViewer role.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with Vault:Administrator role assigned have the described permissions only within the specified scope of tenants.