Backtrack:  
 
by lunarg on December 9th 2020, at 10:27

To backup Microsoft SQL Server, the account used for VM-side processing (application aware processing) requires certain permissions. Veeam recommends assigning the sysadmin role on the SQL Server but it is also possible to assign minimal permissions on the databases it needs to backup, which is the preferred method for security hardening.

The User Guide for VMware vSphere outlines the required permissions as well but for convenience, I've listed them here as well.

Instance-level roles:

Assign these roles:

  • public
  • dbcreator

Database-level roles:

Assign these roles:

  • System databases master and model:
    • db_backupoperator
    • db_datareader
    • public
  • System database msdb:
    • db_backupoperator
    • db_datareader
    • public
    • db_datawriter
  • User databases:
    • db_backupoperator
    • db_denydatareader
    • public

Securables:

Assign these securables:

  • view any definition
  • view server state
 
 
« April 2021»
SunMonTueWedThuFriSat
    123
45678910
11121314151617
18192021222324
252627282930
 
Links
 
Quote
« Debating Windows vs. Linux vs. Mac is pointless: they all have their merits and flaws, and it ultimately comes to down to personal preference. »
Me