PowerProtect Data Manager 19.15 Microsoft SQL Server User Guide

PDF

Additional privileges required for a dedicated vCenter user account to use Transparent Snapshot Data Mover

You can use the vSphere Client to specify the required privileges for the dedicated vCenter user account, or you can use the PowerCLI, which is an interface for managing vSphere.

The following table includes the additional privileges required to use the Transparent Snapshot Data Mover (TSDM) for virtual machine protection operations. All of the privileges required for the dedicated vCenter user account are provided in the PowerProtect Data Manager Virtual Machine User Guide.

Table 1. Minimum required vCenter user account privilegesTable of minimum required vCenter user account privileges
Setting	vCenter 7.0.3 and later required privileges	PowerCLI equivalent required privileges
Datastore	Datastore > Browse datastore Datastore > Low level file operations	$privileges = @( 'Host.Config.Patch', 'Host.Config.Image', 'Host.Config.NetService', 'Datastore.FileManagement', 'Datastore.Browse', 'vSphereDataProtection.Protection', 'vSphereDataProtection.Recovery', 'System.Read', 'Task.Create', 'Task.Update' ) New-VIRole -Name 'PowerProtect' -Privilege (Get-VIPrivilege -Id $privileges)
Host	Configuration > Image configuration Configuration > Security profile and firewall Configuration > Query patch NOTE:These privileges are required for vSphere Installation Bundle (VIB) install, update, and uninstall operations. If Auto VIB management is enabled in the Infrastructure > Protection Engines window, operations might be inconsistent.
System	System > Read
Tasks	Tasks > Create task Tasks > Update task
vSphere Data Protection	Protection Recovery