VMware vCenter Server privileges: using NetBackup
To recover VMware virtual machine from NetBackup generated backup images to the recovery data center, the vCenter Server user needs to have a role assigned that has the privileges, listed in the table, on the vCenter server data center level.
Review the following considerations before assigning the privileges:
You need to maintain propagation of these data center level privileges on the child objects.
The child objects should not restrict the data center level privileges.
Table: VMware vCenter Server privileges required for using NetBackup integration
Privilege | Navigation path in VMware vCenter Server |
|---|---|
Datastore.AllocateSpace Datastore.FileManagement Datastore.Browse | Datastore > Allocate space Datastore > Low level file operations Datastore > Browse datastore |
Host.Config.Network | Host > Configuration > Network configuration |
Network.Assign | Network > Assign network |
Resource.ApplyRecommendation Resource.AssignVMToPool | Resource > Apply recommendation Resource > Assign virtual machine to resource pool |
System.View System.Anonymous System.Read | These privileges need not be set explicitly. |
VirtualMachine.Config.AddRemoveDevice VirtualMachine.Config.AdvancedConfig VirtualMachine.Config.Resource VirtualMachine.Config.EditDevice VirtualMachine.Config.Settings VirtualMachine.Config.DiskExtend | Virtual machine > Configuration > Add or remove device Virtual machine > Configuration > Advanced Virtual machine > Configuration > Change resource Virtual machine > Configuration > Modify device settings Virtual machine > Configuration > Settings Virtual machine > Configuration > Extend virtual disk |
VirtualMachine.GuestOperations.Modify VirtualMachine.GuestOperations.Execute VirtualMachine.GuestOperations.Query | Virtual machine > Guest operations > Guest operation modifications Virtual machine > Guest operations > Guest operation program execution Virtual machine > Guest operations > Guest operation queries |
VirtualMachine.Interact.DeviceConnection VirtualMachine.Interact.PowerOff VirtualMachine.Interact.PowerOn | Virtual machine > Interaction > Device connection Virtual machine > Interaction > Power off Virtual machine > Interaction > Power on |
VirtualMachine.Inventory.Create VirtualMachine.Inventory.Register VirtualMachine.Inventory.Delete VirtualMachine.Inventory.Unregister | Virtual machine > Inventory > Create new Virtual machine > Inventory > Register Virtual machine > Inventory > Remove Virtual machine > Inventory > Unregister |
VirtualMachine.Provisioning.Customize | Virtual machine > Provisioning > Customize |
In addition to the above privileges, you also need the privileges required for configuring ESX servers:
See VMware vCenter Server privileges: configuring ESX servers .
More Information