Which permission are needed vor vcbRestore?

[pcervicek]

I can make a backup with vcbMounter. The backup is done with a user with the role "Vmware Consolidated Backup User", but this role cannot restore the backuped vm. vcbRestore tries to execute "registerVM"

2009-12-11 16:20:04.722 'SOAP' 3076428608 trivia Sending soap request to TCP:host:443: registerVm

2009-12-11 16:20:04.771 'vcbRestore' 3076428608 error Error: No permission to perform this action.

2009-12-11 16:20:04.772 'SOAP' 3076428608 trivia Sending soap request to TCP:host:443: logout

The Role "Administrator" is allowed to do the restore. Which permission do I need to add for the backup-user to allow "registerVM" ? I read the documentation but there are no hints which permission are required for a restore.

[marcelo_soares]

I think VM administrator should do the job. Never tried.

Marcelo Soares

VMWare Certified Professional 310/410

Technical Support Engineer

Linux Server Senior Administrator

[pcervicek]

I would like to restrict the VCB User. The role Administrator ist too powerful.

[Rubeck]

http://kb.vmware.com/kb/5761438 ?

/Rubeck

[pcervicek]

Yes, that helped. But the KB-article was incomplete:

1) I had to put the permissions on "Datacenter"

2) There are still permissions missing. I could restore a backup after selecting all "VM -> Configuration" ticks

[RParker]

> I would like to restrict the VCB User. The role Administrator ist too powerful.

Well that's true, to point. If you apply Administrator AND you use the same Administrator for ALL your VM managment, then yes. But you can assign a NEW user, add the role Administrator, so that ONLY that VDR can use that user, it's not too powerful.

[dinny]

It is very poorly documented.

To do converter restores with Netbackup 6.5.4 and VC 2.5 and VCB 1.5 you seem to need the odd extra permission too - then when you upgrade to VC 4 and VCB 1.5 u1 for vsphere it then needs even more rights..

I got bored experimenting - but the below is enough to make restores work in all circumstances that I have tried - I have no doubt it could be tidied up far more - but I was happy that at least now the VCB user was far less powerful than a full admin role.

Datastore - all bar remove and rename

Folder all bar delete

Global all

Network just assign

Resource all bar remove resource pool

Scheduled Tasks all

Tasks all

Virt Mach all

Dinny

[dan_white]

I opened a case with support on this. They were not able to point me to any documentation on their side. I did a LOT of testing and the following permissions work on our VCB use role with NetBackup 6.5.5 to execute backups and restores

Hopefully is saves some pain for others

Thx,

Dan