best practices veeam backup and recovery installation

The following permissions are required to work with virtualization servers and hosts during data protection tasks. The account used for installation, upgrade and operation requires superuser role. Alternatively, you can assign db_owner role for this database to the service account.įor more information, see Microsoft Docs.

Operation: the account used to run Veeam Backup Service requires db_datareader and db_datawriter roles as well as permissions to execute stored procedures for the configuration database on the Microsoft SQL Server.

To grant these permissions through role assignment, it is recommended that you use the account with db_owner role.

Upgrade: current account should have sufficient permissions for that database.If the current account does not have this permission, a Database Administrator may create an empty database in advance and grant the db_owner role to the account that will be used for installing Veeam Backup & Replication. After database creation this account automatically gets a db_owner role and can perform all operations with the database. Installation (remote or local): current account needs CREATE ANY DATABASE permission on the SQL server level.You require different sets of Microsoft SQL permissions in the following cases: (where the configuration database is stored) The account used to run the Veeam Backup Service must be a LocalSystem account or must have the local Administrator permissions on the backup server.

For more information, see Microsoft Docs. Īccounts that are members of the Protected Users Active Directory group cannot be used to access the backup server remotely over the Veeam Backup & Replication console.

For more information on where mount points are created, see Mount Points and Restore Scenarios. If you plan to save files to a new location, the user who launched the Veeam Backup & Replication console does not have permissions to read and write data to the new location, and the mount point is located on the same machine as the Veeam Backup & Replication console, check that the user has the SeBackupPrivilege and SeRestorePrivilege. However, you may require additional permissions to recover guest OS files of Microsoft Windows VMs. In other cases, you can run it under an account that is a member of the Users group on the machine where the console is installed. When you open the Veeam Backup & Replication console for the first time or after a cumulative patch is installed on the backup server, you must run the console under an account with the local Administrator permissions on the machine where the console is installed. Veeam Backup & Replication Console Permissions The account used for product installation must have the local Administrator permissions on the target machine.

Best practices veeam backup and recovery installation