@@ -96,6 +96,10 @@ Update the following global configuration values in CloudStack:
9696+------------------------------------------------+-------------------------------------------------------------+
9797| integration.veeam.control.api.password | Password used by Veeam to authenticate with the service. |
9898+------------------------------------------------+-------------------------------------------------------------+
99+ | integration.veeam.control.service.account | ID of the service account that the Veeam Control |
100+ | | Service uses to perform operations on resources. |
101+ | | This should be a Root Admin account. |
102+ +------------------------------------------------+-------------------------------------------------------------+
99103| integration.veeam.control.allowed.client.cidrs | Comma-separated list of CIDR blocks representing clients |
100104| | allowed to access the API. If empty, all clients will be |
101105| | allowed. Example: 192.168.1.1/24,192.168.2.100/32 |
@@ -227,8 +231,8 @@ The following considerations should be taken into account when deploying the
227231worker VM:
228232
229233* The **service account ** configured for the CloudStack Veeam Control Service
230- should have permission to deploy and access virtual machines in the selected
231- network .
234+ should be a ** root-admin ** account to have permission to deploy and access
235+ virtual machines in the required networks .
232236* The worker VM should use an appropriate **compute offering ** depending on the
233237 resources allocated for the backup proxy in Veeam Backup & Replication.
234238* If multiple backup proxies are required for scaling backup operations,
@@ -259,10 +263,6 @@ https://helpcenter.veeam.com/
259263Instance Backup using Veeam Backup and Replication
260264--------------------------------------------------
261265
262- For a KVM instance to be accessible for backup in **Veeam Backup & Replication (Veeam B&R) **,
263- the instance must be visible and accessible to the **service account ** configured for the
264- CloudStack Veeam Control Service.
265-
266266Once CloudStack has been added as a hypervisor manager in Veeam B&R, instances managed by
267267CloudStack will appear in the Veeam inventory. Backup jobs can then be created and managed
268268in the same way as with other supported hypervisor managers.
@@ -338,17 +338,13 @@ The restore process works as follows:
338338 volumes.
339339
340340All restore-related operations are executed using the **service account
341- configured for the CloudStack Veeam Control Service **. Because of this,
342- the service account must have sufficient permissions to perform the
343- following actions:
341+ configured for the CloudStack Veeam Control Service **. As the service account
342+ is a root-admin it has permissions to perform the following actions:
344343
345344* Deploy new instances.
346345* Attach volumes.
347346* Access and attach networks selected during the restore process.
348347
349- If the service account does not have access to the networks selected in
350- the **Veeam restore wizard **, the restore operation may fail.
351-
352348The plugin restores the instance configuration using the metadata saved
353349during backup, particularly for restore-to-original-location scenarios.
354350This helps ensure that the restored instance closely resembles the
0 commit comments