Backtrack:  
 
by lunarg on December 9th 2020, at 10:27

To backup Microsoft SQL Server, the account used for VM-side processing (application aware processing) requires certain permissions. Veeam recommends assigning the sysadmin role on the SQL Server but it is also possible to assign minimal permissions on the databases it needs to backup, which is the preferred method for security hardening.

The User Guide for VMware vSphere outlines the required permissions as well but for convenience, I've listed them here as well.

Instance-level roles:

Assign these roles:

  • public
  • dbcreator

Database-level roles:

Assign these roles:

  • System databases master and model:
    • db_backupoperator
    • db_datareader
    • public
  • System database msdb:
    • db_backupoperator
    • db_datareader
    • public
    • db_datawriter
  • User databases:
    • db_backupoperator
    • db_denydatareader
    • public

Securables:

Assign these securables:

  • view any definition
  • view server state
 
 
« July 2024»
SunMonTueWedThuFriSat
 123456
78910111213
14151617181920
21222324252627
28293031   
 
Links
 
Quote
« Most people tend to avoid true conflict. Ironically this breeds more conflict. »