Resrticted VM file restore access

Last post 05-29-2019, 7:41 PM by ameykarandikar. 5 replies.
Sort Posts: Previous Next
  • Resrticted VM file restore access
    Posted: 05-23-2019, 10:06 PM

    We are protecting customer's VM in Shared cloud (other customer share the host and datastore)

    I have assigned the security permission in Commvault account ; however; when I login with the customer commvault username and password in the console he can still see the option to restore VM and can look at all the hosts and datastores in the share envrioment.  I want to restric his view only to his VMs and he should only be able to do file restore to his VMs.  

    • Browse: Browse virtual machine data.
    • In Place Recover: Recover files and folders to the source VM.
    • Live Browse: Browse files and folders from a backup that did not collect file details.

      Note: If a virtual machine is configured to perform file system backups and is also included in backups for Virtual Server Agent backups, this permission is required in order to perform file system restores.

    http://documentation.commvault.com/commvault/v11/article?p=102614.htm

    the account permission for backing up VMs require these hosts/datastore permissions. Any ideas how to just let customer has access only to his vms on the Commvault console so that he can only restore guest files/folder. 

  • Re: Resrticted VM file restore access
    Posted: 05-24-2019, 7:16 PM

    Hi,

    At what level are permissions to the customer assigned?

  • Re: Resrticted VM file restore access
    Posted: 05-26-2019, 10:20 PM

    If you are refering to VMWARE credentials; we have tried creating an account with permissions only to the VMs but the backup fails with error unable to download config file; howwever when we allow permissions to host and cluster along with the vcenter server; the customer can view the whole infrastructure during the restore option. 

     

  • Re: Resrticted VM file restore access
    Posted: 05-28-2019, 4:13 PM

    I was asking about the permissions given to the customer in commvault.

  • Re: Resrticted VM file restore access
    Posted: 05-29-2019, 1:52 AM

    customer is a part of a user group customer_gp1 and CV_restricted_visibility

    the GP1 role only has browse,download, live browse and in place recover and overwrite on restore option 

  • Re: Resrticted VM file restore access
    Posted: 05-29-2019, 7:41 PM

    are these permissions given on the vsa client level?

The content of the forums, threads and posts reflects the thoughts and opinions of each author, and does not represent the thoughts, opinions, plans or strategies of Commvault Systems, Inc. ("Commvault") and Commvault undertakes no obligation to update, correct or modify any statements made in this forum. Any and all third party links, statements, comments, or feedback posted to, or otherwise provided by this forum, thread or post are not affiliated with, nor endorsed by, Commvault.
Commvault, Commvault and logo, the “CV” logo, Commvault Systems, Solving Forward, SIM, Singular Information Management, Simpana, Commvault Galaxy, Unified Data Management, QiNetix, Quick Recovery, QR, CommNet, GridStor, Vault Tracker, InnerVault, QuickSnap, QSnap, Recovery Director, CommServe, CommCell, SnapProtect, ROMS, and CommValue, are trademarks or registered trademarks of Commvault Systems, Inc. All other third party brands, products, service names, trademarks, or registered service marks are the property of and used to identify the products or services of their respective owners. All specifications are subject to change without notice.
Close
Copyright © 2019 Commvault | All Rights Reserved. | Legal | Privacy Policy