How to configure backup role within Enterprise Vault Role-based Administration (RBAC) for your Backup Exec Service Account (BESA)

  • Modified Date:
  • Article ID:000015971

Problem

An administrator of Backup Exec wishes to assign the Backup Roles within Enterprise Vault to their current Backup Exec Service Account (BESA).

Solution

Configuring a Backup role within Roles-based Administration (Enterprise Vault 10 and 11)

  1. Log in to the Enterprise Vault Server as the Vault Service Account

  2. In the Enterprise Vault Administration console, right-click on ‘Directory on serverAliasName’ then select 'Authorization Manager...'

  3. Expand 'Definitions'

  4. Right-click 'Role Definitions'

  5. Select 'New Role Definition'

  6. Give the new definition an appropriate Name, such as 'Backup Role', and Description

  7. Select 'Add…' click on the 'Tasks' tab, then add the following Tasks:

    • EVT Manage Index Location Backup Mode
    • EVT Manage Vault Store Backup Mode
    • EVT Manage Enterprise Vault Stores
  8. Press ‘OK’

  9. Right-click on Role Assignments and select 'Assign Roles...'

  10. Locate the ‘Backup Role’ definition created earlier and select it

  11. Press ‘OK’

 

Assigning the Backup Exec Service Account to the Backup role

  1. Log in to the Enterprise Vault Server as the Vault Service Account

  2. In the Enterprise Vault Administration console, right-click on ‘Directory on serverAliasName’ then select 'Authorization Manager...'

  3. Right click on the Role Assignment you created and select 'Assign Windows Users and Groups'

  4. Add the Backup Exec Service Account to the object list and select 'Check Names' to be sure that the name is properly resolved

  5. Press ‘OK’


Configuring a Backup role within Roles-based Administration (Enterprise Vault 12)
The "Authorization Manager" no longer exists in the Administration Console. All role-based administration assignment should be performed via the Enterprise Vault Management Shell. In order to protect vault stores, "Storage Administrator" role should be assigned to the Backup Exec logon account. In order to protect index location "Power Administrator" role should be assigned.

  1. Log in to the Enterprise Vault server as the Vault Service Account
  2. Launch the Enterprise Vault Management Shell
  3. To assign "Storage Administration" role to the Backup Exec service account, run the following command
    • Add-EVRbaRoleMember -Identity "Storage Administrator" -Members "<Backup Exec Service Account>
  4. To assign "Power Administrator" role to the Backup Exec service account, run the following command:
    • Add-EVRbaRoleMember -Identity "Power Administrator" -Members "<Backup Exec Service Account>
 

After this has been completed the following steps can be performed to test the permissions are working effectively.

  1.  Log onto the Enterprise Vault server as the Account that was added above.

  2. Launch the Enterprise Vault Management Shell

  3. Run the following commands, and verify success.

    • Set-IndexLocationBackupMode

    • Clear-IndexLocationBackUpMode

    • Set-VaultStoreBackupMode

    • Clear-VaultStoreBackupMode

For more information please see "About Backup Mode cmlets" in the related articles below.

Also the Enterprise Vault services may need to be restarted for the above account changes to take effect.

 

 

 

Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)