User Roles

Veeam Data Cloud provides built-in roles that you can assign to Veeam Data Cloud users. User roles define the operations that the user can perform, including backup, restore and user management. You can assign a role with access to your entire Veeam Data Cloud organization or a specific workload, such as Microsoft Entra ID or Salesforce.

Veeam Data Cloud Organization Roles

You can assign the following roles to users to allow them to work with your Veeam Data Cloud organization.

• OrganizationAdmin — can manage users and perform all configuration actions, backup and restore operations. This role gives a user access to all workloads and tenants. The first user invited to your Veeam Data Cloud organization becomes OrganizationAdmin.
• OrganizationViewer — can view the lists of Veeam Data Cloud users and tenants. This role is granted for all Veeam Data Cloud users.

Entra ID Roles

You can assign the EntraID:Administrator role to users working with Veeam Data Cloud for Microsoft Entra ID. Users with the EntraID:Administrator role assigned can add tenants and perform all configuration actions, backup and restore operations. You can limit access to specific Entra ID tenants when assigning this role.

To prohibit a user with the EntraID:Administrator role to add tenants, limit access to specific Entra ID tenants when assigning this role and assign the user the OrganizationViewer role.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with EntraID:Administrator role assigned have the described permissions only within the specified scope of tenants.

Salesforce Roles

You can assign the following roles to users working with Veeam Data Cloud for Salesforce:

• Salesforce:Administrator — can add, rename and delete tenants and perform all configuration actions, backup and restore operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:BackupOperator — can add tenants, manage backup policies, manage protected data and perform all restore and archival operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:RestoreOperator — can only perform restore operations. You can limit access to specific Salesforce tenants when assigning this role.
• Salesforce:Viewer — can monitor backup and restore processes without performing any operations. You can limit access to specific Salesforce tenants when assigning this role.

The following table describes the functionality available to users with different roles in Veeam Data Cloud. Note that users with Salesforce:Administrator, Salesforce:BackupOperator, Salesforce:RestoreOperator and Salesforce:Viewer roles assigned will have the described permissions only within the specified scope of tenants.