Forum Discussion

hmontero's avatar
hmontero
Level 5
13 years ago

Delegar la administracion de respaldos

Hola. Tengo que delegar la administracion de los respaldos a otros usuarios pero sin darles permisos excesivos.

Actualmente el usuario con que se realizan los respaldos es domain admin.

Como hago para definir otro usuario en BE sin darle permisos administrativos sobre los servidores???.

Es decir que pueda manejar la consola completamente ( remota, instalada en su pc) pero que los respaldos se sigan realizando con el usuario que ya tiene el backup exec como system account. También debe poder crear jobs nuevos.

Hasta ahora lo que hice fue: creé una nueva "logon account" en BE la cual coincide con el usuario de active directory , como restringida.

Cuando el usuario trata de conectarse al servidor BE ( con la consola remota) da error diciendo que el acceso está denegado.

 

Estoy usando BackupExec 2010 R3 y los últimos fixes, sobre win 2008 R2.

Gracias por la ayuda.

Saludos

Horacio (desde Uruguay)

2010
Backup and Recovery
Backup Exec
Backup Exec (media server only)
  • hmontero's avatar
    hmontero
    13 years ago

    VJware...i put the user in local backup operator group in the BE-Server.

    Apparently worked...i´ll wait till tomorrow to try using their user-id because..they are gone

    Thanks

13 Replies

Sort By
  • VJware's avatar
    VJware
    Level 6
    13 years ago

    These are the min requirements for a BESA - http://www.symantec.com/docs/TECH36718

  • CraigV's avatar
    CraigV
    Moderator
    13 years ago

    Hi,

     

    You can read my article below for further information on this...

     

     

    https://www-secure.symantec.com/connect/articles/how-leverage-backup-execs-remote-console

     

    Thanks!

  • CraigV's avatar
    CraigV
    Moderator
    13 years ago

    ...the OP would like other users to log on but not have all the rights to BE!

  • VJware's avatar
    VJware
    Level 6
    13 years ago

    I understand that...however, the OP also wants these users to also create new backup jobs... (atleast this is what Google Translate also translated for me, else I might be wrong...hence, posted the BESA requirements )

  • hmontero's avatar
    hmontero
    Level 5
    13 years ago

    Based on the tech36718 the user must be domain admin or backup operator.

    The user belongs to backup operator group...but ...when try to connect to the BE-server using remote console..the error "access denied" appears.

    User in AD anv BE is the same...the pwd too.

  • hmontero's avatar
    hmontero
    Level 5
    13 years ago

    VJWARE..i need to delegate backups/retore's job task to another group without delegate domain admins rights.

    I've installed remote administrative console in their computers, but when they try to connect to the BE server.."access denied" error appears.

    Is possible to define a user to access BE-server and the jobs still running with other user (domain admin)???.

    Thanks a forgive my english errors..8(

  • VJware's avatar
    VJware
    Level 6
    13 years ago

    Check if this user has the " log on locally" right on the BE media server....Also, try to launch the the Remote Admin console in elevated mode using "run as"..

    Also, as I understand, you are trying to use the BE logon account for the remote admin console as well, right ?

  • Ken_Putnam's avatar
    Ken_Putnam
    Level 6
    13 years ago

    There used to be an add-on called ExecView that would allow non administrators to view jobs and alerts.and to respond to alerts

     

    That disappeared a long time ago (v11d?)

    Head over to the Ideas page and find the post and give that a "thumbs up"  We may not see an equivalent, but you never know . . . .

  • hmontero's avatar
    hmontero
    Level 5
    13 years ago

    VJware..yes, it´s true...i´m using BE logon account in remote console too. Use elevated mode is not a possibility because the users must log in using their own user-id and pwd..

    i´ll check wheter the user can "log on locally" in BE-server

  • hmontero's avatar
    hmontero
    Level 5
    13 years ago

    Ken, hello.

    The problema is that is not enough to view jobs and alerts...i need this poeple can create jobs too.

    The idea is delegate backup/restore tasks to another group without giving elevated rights in the network.

    In the future, backup/restore tasks must be performed by "Operations" group...not more for "infrastructure" group.

    If i put the user in "domain admin" group..it works!!!...but...NOOOOO....NEVERRRRRRRR...8)

    Thank you.