This post is more than 5 years old
120 Posts
0
1354
Avamar 5SP3 and vCenter 4.1 Security
I am looking for the permissions required for backing up image level backups in vCenter using Avamar but I did not see what the minimal security requirements are for the avamar user account we are using in vcenter.
Currently it is working with administrator rights, but we want to lock down the account to just what it needs. Does anyone have any insight into this or know of any good docs that outline the image level backup process including required secuirty rights ?
All the VMware Installation guide offers is this about creating the account:
Task 2: Create Dedicated vCenter User Account
EMC strongly recommends that you set up a separate vCenter user account that is strictly dedicated for use with Avamar. Use of a generic user account such as "Administrator" might hamper future troubleshooting efforts because it might not be clear which "Administrator" actions are actually interfacing or communicating with the Avamar server. Using a separate vCenter user account ensures maximum clarity should it become necessary to examine vCenter logs.
Anonymous
5 Practitioner
5 Practitioner
•
274.2K Posts
0
October 21st, 2010 13:00
Yes – Please read the Release notes attached.
1 Attachment
Release Notes SP3.pdf
Anonymous
5 Practitioner
5 Practitioner
•
274.2K Posts
0
October 21st, 2010 13:00
Hello Rob,
The minimum rights required for VMware backups are :
Datastore >
• Allocate Space
• Browse datastore
• Low level file operations
• Move datastore
• Remove datastoreTOR
• Remove file
• Rename datastore
Folder >
• Create Folder
Global >
• Cancel task
• Log event
• Settings
Network >
• Assign network
• Configure
Resource >
• Assign virtual machine to resource pool
Sessions >
• Validate session
Tasks >
• Create task
• Update task
Virtual machine > Configuration >
• Add existing disk
• Add new disk
• Add or Remove device
• Advanced
• Change CPU count
• Change Resource
• Disk change Tracking
• Disk Lease
• Host USB device
• Memory
• Modify device setting
• Raw device
• Reload from path
• Remove disk
• Rename
• Reset guest information
• Settings
• Swapfile placement
• Upgrade virtual hardware
• Extend Virtual disk
Virtual machine > Interaction >
• Power Off
• Power On
• Reset
Virtual machine > Inventory >
• Create new
• Register
• Remove
• Unregister
Virtual machine > Provisioning >
• Allow read-only disk access
• Allow virtual machine download
• Mark as Template
Virtual machine > State
• Create snapshot
• Remove Snapshot
• Revert to snapshot
Regards,
Silas Simon
rob_steele
120 Posts
0
October 21st, 2010 13:00
Thanks Silas ! Do you have an official document outlining this ?
rob_steele
120 Posts
0
October 21st, 2010 14:00
Thanks a bunch !