Minimum privileges for a netvault backup role on the vCenter server to be assigned to user (4047521)

Netvault VMware plugin minimum privileges need for Netvault backup role on the vCenter server.


When adding a vCenter server to Netvault VMware plugin we need to give a username and password. This user not only has to be ability login to the vCenter server it has to be assigned a role. If you do not want to give this user the Administrator role on vCenter server there is a minimum set of privileges required to give the user or there will be problems during backup and more commonly restore:
These are listed in the resolution section.

If you want to create a specific user for VMware with limited permissions to perform necessary tasks within Netvault, these are the permissions needed.

Notes:

• The vCenter user account must have permissions on the vCenter, datacenter, ESX server, resource pool, VM folder, and virtual machine levels for any virtual machines to be backed up and restored. The backup for a virtual machine fails if the user does not have permission on the vCenter, datacenter, and ESX server where the virtual machine resides. When you assign a user and role for a specific entity, select the option to propagate permissions to child objects, so that operations for virtual machines that use those entities are successful.
• To ensure that backups and restores are successful, use the vSphere Client or Web Client to assign user permissions on each required entity.
• To hide resources from a user, you can assign a "No access" user role to the entity.
• To enable restores, assign both backup and restore permissions for the type of restore .
• By default this list shows settings for vSphere 7.0; but differences for earlier versions of vSphere are noted. Settings that are not available in vSphere 4.1 may be needed for features that require vSphere 5.0 or greater.

NetVault VMWare plug-in minimum user permissions:

Datastore

• Allocate space
• Browse datastore
• Configure datastore
• Low level file operations
• Remove datastore
• Remove file
• Rename datastore
• Update virtual machine files

Extension

• Register extension
• Unregister extension
• Update extension

Global

• Cancel task
• Disable methods
• Enable methods
• Licenses
• Log event
• Manage custom attributes
• Set custom attribute
• Settings

Host

• Configuration
  • Advanced settings
  • Connection
  • Network configuration
  • Storage partition configuration
  • System Management
• Inventory
  • Modify cluster
• Local operations
  • Create virtual machine
  • Reconfigure virtual machine

vSphere Tagging

• Assign or Unassign vSphere Tag
• Create vSphere Tag
• Create vSphere Tag Category
• Edit vSphere Tag
• Edit vSphere Tag Category
• Modify UsedBy Field For Category
• Modify UsedBy Field For Tag

Network

• Assign network
• Configure

Resource

• Assign vApp to resource pool
• Assign virtual machine to resource pool
• Migrate powered off virtual machine
• Migrate powered on virtual machine

Profile-driven storage

• Profile-driven storage update
• Profile-driven storage view

Tasks

• Create task
• Update task

vApp

• Add virtual machine
• Assign resource pool
• Clone
• Create
• Delete
• Import
• Move
• Power off
• Power on
• Rename
• vApp application configuration
• vApp instance configuration

Virtual machine

• Change Configuration
  • Acquire disk lease
  • Add existing disk
  • Add new disk
  • Add or remove device
  • Advanced configuration
  • Change CPU count
  • Change Memory
  • Change Settings
  • Change Swapfile placement
  • Change resource
  • Configure Host USB device
  • Configure Raw device
  • Configure managedBy
  • Display connection settings
  • Extend virtual disk
  • Modify device settings
  • Query Fault Tolerance compatibility
  • Query unowned files
  • Reload from path
  • Remove disk
  • Rename
  • Reset guest information
  • Set annotation
  • Toggle disk change tracking
  • Toggle fork parent
  • Upgrade virtual machine compatibility
• Edit Inventory
  • Create from existing
  • Create new
  • Move
  • Register
  • Remove
  • Unregister
• Guest operations
  • Guest operation modifications
  • Guest operation program execution
  • Guest operation queries
• Interaction
  • Connect devices
  • Power off
  • Power on
  • Reset
  • Suspend
• Provisioning
  • Allow disk access
  • Allow read-only disk access
  • Allow virtual machine download
  • Clone virtual machine
  • Mark as template
• Snapshot management
  • Create snapshot
  • Remove snapshot
  • Revert to snapshot