topic Re: User permission for 3rd party in ESXi Discussions

User permission for 3rd party

faziz — Sun, 08 Oct 2023 06:26:48 GMT

we have ESXi we need to take backup for VMs using 3rd party tool such as Veeam or veritas but they need user account with full privileges to do this backup, how i can give him this permission and in same time protect my VM from misuse by them in case such as how i make sure they will not misuse that user to remove VM/Disk of any VM

Re: User permission for 3rd party

scott28tt — Sun, 08 Oct 2023 07:04:23 GMT

Free ESXi or paid for licensed ESXi? It matters: https://forums.veeam.com/vmware-vsphere-f24/can-you-backup-vms-on-esxi-7-free-license-using-vbr-community-edition-t82155.html

This article says you need root privileges for ESXi with no vCenter Server: https://helpcenter.veeam.com/docs/backup/permissions/installation.html?ver=120

Re: User permission for 3rd party

faziz — Sun, 08 Oct 2023 09:28:30 GMT

yes, I will give them root privileges, but how I can guarantee they will not misuse this account like remove or delete VM.

Re: User permission for 3rd party

battybishop — Sun, 08 Oct 2023 10:36:27 GMT

The only option for a least privilege approach is by using vCenter otherwise it is root privileges on standalone ESXi and then you will have to monitor logs.

Re: User permission for 3rd party

a_p_ — Sun, 08 Oct 2023 10:39:17 GMT

The permissions are granted to the application only, i.e. not to Veeam (the company) itself.
Taking into account that Veeam has been on the market for many years, and will for sure not lose its reputation, I wouldn't be concerned too much.

No matter which backup application you use, all of them require elevated permission to backup and restore VMs.

André