Backtrack:  
 
by lunarg on December 9th 2020, at 10:27

To backup Microsoft SQL Server, the account used for VM-side processing (application aware processing) requires certain permissions. Veeam recommends assigning the sysadmin role on the SQL Server but it is also possible to assign minimal permissions on the databases it needs to backup, which is the preferred method for security hardening.

The User Guide for VMware vSphere outlines the required permissions as well but for convenience, I've listed them here as well.

Instance-level roles:

Assign these roles:

  • public
  • dbcreator

Database-level roles:

Assign these roles:

  • System databases master and model:
    • db_backupoperator
    • db_datareader
    • public
  • System database msdb:
    • db_backupoperator
    • db_datareader
    • public
    • db_datawriter
  • User databases:
    • db_backupoperator
    • db_denydatareader
    • public

Securables:

Assign these securables:

  • view any definition
  • view server state
 
 
« March 2024»
SunMonTueWedThuFriSat
     12
3456789
10111213141516
17181920212223
24252627282930
31      
 
Links
 
Quote
« When a bird does poo poo in your eye, be happy elephants don't fly. »