I can make a backup with vcbMounter. The backup is done with a user with the role "Vmware Consolidated Backup User", but this role cannot restore the backuped vm. vcbRestore tries to execute "registerVM"
2009-12-11 16:20:04.722 'SOAP' 3076428608 trivia Sending soap request to TCP:host:443: registerVm
2009-12-11 16:20:04.771 'vcbRestore' 3076428608 error Error: No permission to perform this action.
2009-12-11 16:20:04.772 'SOAP' 3076428608 trivia Sending soap request to TCP:host:443: logout
The Role "Administrator" is allowed to do the restore. Which permission do I need to add for the backup-user to allow "registerVM" ? I read the documentation but there are no hints which permission are required for a restore.
Yes, that helped. But the KB-article was incomplete:
1) I had to put the permissions on "Datacenter"
2) There are still permissions missing. I could restore a backup after selecting all "VM -> Configuration" ticks
> I would like to restrict the VCB User. The role Administrator ist too powerful.
Well that's true, to point. If you apply Administrator AND you use the same Administrator for ALL your VM managment, then yes. But you can assign a NEW user, add the role Administrator, so that ONLY that VDR can use that user, it's not too powerful.
It is very poorly documented.
To do converter restores with Netbackup 6.5.4 and VC 2.5 and VCB 1.5 you seem to need the odd extra permission too - then when you upgrade to VC 4 and VCB 1.5 u1 for vsphere it then needs even more rights..
I got bored experimenting - but the below is enough to make restores work in all circumstances that I have tried - I have no doubt it could be tidied up far more - but I was happy that at least now the VCB user was far less powerful than a full admin role.
Datastore - all bar remove and rename
Folder all bar delete
Network just assign
Resource all bar remove resource pool
Scheduled Tasks all
Virt Mach all