Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ for VMware Administrator's Guide
  3. VMware vSphere privileges
  4. VMware vSphere privileges for NetBackup plug-in operations
NetBackup™ for VMware Administrator's Guide

VMware vSphere privileges for NetBackup plug-in operations

This section details the privileges necessary for NetBackup plug-in operations within VMware vSphere, focusing on an instant virtual machine recovery and a full VM restore with different transport modes. These privileges need to be set at the vCenter server level.

See Instant virtual machine recovery.

See Full VM restore with transport mode: NBD.

See Full VM restore with transport mode: hotadd.

See Full VM restore with transport mode: SAN.

Instant virtual machine recovery

For instant virtual machine recovery, a set of privileges are required to perform the operations that are related to the datastore, global settings, host configuration, and more.

Datastore

  • Allocate space

  • Browse datastore

  • Low level file operations

Global

  • Enable methods

  • Disable methods

Host

  • Configuration

    • Storage partition configuration

Network

  • Assign network

Resource

  • Assign virtual machine to resource pool

Sessions

  • Validate session

Virtual machine

  • Change configuration

    • Acquire disk lease

    • Add existing disk

    • Add new disk

    • Add or remove device

    • Advanced configuration

    • Change settings

    • Change Swapfile placement

    • Change resource

    • Remove disk

    • Rename

    • Toggle disk change tracking

  • Edit inventory

    • Create new

    • Register

    • Remove

    • Unregister

  • Interaction

    • Power off

    • Power on

  • Provisioning

    • Allow disk access

  • Snapshot management

    • Create snapshot

    • Remove snapshot

Full VM restore with transport mode: NBD

The NBD transport mode requires additional privileges for the datastore, global settings, host configuration, and more.

Datastore

  • Allocate space

  • Browse datastore

  • Low level file operations

Global

  • Enable methods

  • Disable methods

Network

  • Assign network

Resource

  • Assign virtual machine to resource pool

Sessions

  • Validate session

Virtual machine

  • Change configuration

    • Acquire disk lease

    • Add existing disk

    • Add new disk

    • Add or remove device

    • Advanced configuration

    • Change settings

    • Change Swapfile placement

    • Change resource

    • Configure Raw device

    • Remove disk

    • Rename

    • Toggle disk change tracking

  • Edit Inventory

    • Create new

    • Remove

  • Interaction

    • Power on

  • Provisioning

    • Allow disk access

  • Snapshot management

    • Create snapshot

    • Remove snapshot

    • Revert to snapshot

Full VM restore with transport mode: hotadd

The hotadd transport mode requires additional privileges to update virtual machine files and allow read-only disk access and VM downloads.

Datastore

  • Update virtual machine files

  • Update virtual machine metadata

Virtual machine

  • Provisioning

    • Allow read-only disk access

    • Allow virtual machine download

Full VM restore with transport mode: SAN

The SAN transport mode requires the same privileges as the NBD transport mode.

Feedback

Was this page helpful?
Previous

VMware vSphere privileges to create an instant access VM

Next

VMware vSphere privileges for instant rollback

Feedback

Was this page helpful?