Skip to content

Commit 53ec642

Browse files
committed
Add information on the service account.
1 parent d684df0 commit 53ec642

1 file changed

Lines changed: 8 additions & 12 deletions

File tree

source/adminguide/kvm_veeam.rst

Lines changed: 8 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,10 @@ Update the following global configuration values in CloudStack:
9696
+------------------------------------------------+-------------------------------------------------------------+
9797
| integration.veeam.control.api.password | Password used by Veeam to authenticate with the service. |
9898
+------------------------------------------------+-------------------------------------------------------------+
99+
| integration.veeam.control.service.account | ID of the service account that the Veeam Control |
100+
| | Service uses to perform operations on resources. |
101+
| | This should be a Root Admin account. |
102+
+------------------------------------------------+-------------------------------------------------------------+
99103
| integration.veeam.control.allowed.client.cidrs | Comma-separated list of CIDR blocks representing clients |
100104
| | allowed to access the API. If empty, all clients will be |
101105
| | allowed. Example: 192.168.1.1/24,192.168.2.100/32 |
@@ -227,8 +231,8 @@ The following considerations should be taken into account when deploying the
227231
worker VM:
228232

229233
* The **service account** configured for the CloudStack Veeam Control Service
230-
should have permission to deploy and access virtual machines in the selected
231-
network.
234+
should be a **root-admin** account to have permission to deploy and access
235+
virtual machines in the required networks.
232236
* The worker VM should use an appropriate **compute offering** depending on the
233237
resources allocated for the backup proxy in Veeam Backup & Replication.
234238
* If multiple backup proxies are required for scaling backup operations,
@@ -259,10 +263,6 @@ https://helpcenter.veeam.com/
259263
Instance Backup using Veeam Backup and Replication
260264
--------------------------------------------------
261265

262-
For a KVM instance to be accessible for backup in **Veeam Backup & Replication (Veeam B&R)**,
263-
the instance must be visible and accessible to the **service account** configured for the
264-
CloudStack Veeam Control Service.
265-
266266
Once CloudStack has been added as a hypervisor manager in Veeam B&R, instances managed by
267267
CloudStack will appear in the Veeam inventory. Backup jobs can then be created and managed
268268
in the same way as with other supported hypervisor managers.
@@ -338,17 +338,13 @@ The restore process works as follows:
338338
volumes.
339339

340340
All restore-related operations are executed using the **service account
341-
configured for the CloudStack Veeam Control Service**. Because of this,
342-
the service account must have sufficient permissions to perform the
343-
following actions:
341+
configured for the CloudStack Veeam Control Service**. As the service account
342+
is a root-admin it has permissions to perform the following actions:
344343

345344
* Deploy new instances.
346345
* Attach volumes.
347346
* Access and attach networks selected during the restore process.
348347

349-
If the service account does not have access to the networks selected in
350-
the **Veeam restore wizard**, the restore operation may fail.
351-
352348
The plugin restores the instance configuration using the metadata saved
353349
during backup, particularly for restore-to-original-location scenarios.
354350
This helps ensure that the restored instance closely resembles the

0 commit comments

Comments
 (0)