Forum Discussion

create_share's avatar
create_share
Level 6
13 years ago
Solved

Read Only Admin

Hi!

I need a junior admin to be able to see the Backup Jobs Results on BE 2010 Server. I gave him permission to login to the BE Server remotely but after opening the BE Console it is asking for Password to run the BE Services.

BE Running on Windows 2008.

Any Suggestions?

Thanks.

2010
Backup and Recovery
Backup Exec
  • pkh's avatar
    pkh
    13 years ago

    This is to be expected.  If the BE login account has higher privileges than the account used to log into to the media server, then you would be prompted for the BE login account password when you try to run BE.  For example, your BE login account is a domain administrator account and the account that you used to login to the machine is a local administrator account.  When you try to run BE, you would be prompted for the password of the BE login account which is the domain admin account.

    BE does not support role-based adminstrator, so you cannot have a "junior" acccount which can just check joblogs.

  • pkh's avatar
    pkh
    Moderator
    13 years ago

    This is to be expected.  If the BE login account has higher privileges than the account used to log into to the media server, then you would be prompted for the BE login account password when you try to run BE.  For example, your BE login account is a domain administrator account and the account that you used to login to the machine is a local administrator account.  When you try to run BE, you would be prompted for the password of the BE login account which is the domain admin account.

    BE does not support role-based adminstrator, so you cannot have a "junior" acccount which can just check joblogs.

  • CraigV's avatar
    CraigV
    Moderator
    13 years ago

    Hi,

     

    You might want to check the article below and see if this is a fit for you. It allows the users on the sites to check backups, but not really make any changes to it.

    Hopefully 1 day Symantec will get wise to this and put proper security in BE...

     

    https://www-secure.symantec.com/connect/articles/how-leverage-backup-execs-remote-console

    Thanks!

  • create_share's avatar
    create_share
    Level 6
    13 years ago

    Yes i am already using this but with domain admin account to login to BE Console from my Windows 7 PC. I will try with a standard user after assigning permissions.

    Thanks.

  • ZeRoC00L's avatar
    ZeRoC00L
    Level 6
    13 years ago

    If it is only to review if the backups were sucessfull, you can also consider to send the logs to a mailbox.

  • Colin_Weaver's avatar
    Colin_Weaver
    Moderator
    13 years ago

    We are looking into forms of Role Based Access for a future version, it comes up regularly from our pre-sales teams and is a requested feature on our Product Management radar.

    There is no current information on a planned version for this feature however.

  • create_share's avatar
    create_share
    Level 6
    13 years ago

    Adding the user to the Backup Operators Group in BE Server allowed him to open the Console on his PC. May be not good for security but temporarily can help.

    Thanks.

  • teiva-boy's avatar
    teiva-boy
    Level 6
    13 years ago

    Role Based Administration has been asked for, for years.  Only to be disappointed release after release.  

    It's possible that Product Management doesn't want to take away from the flagship product NetBackup.  Which does have this feature set.  

    And Multistreaming, Multiplexing, better linux support...  it goes on and on.  Hopefully they'll take the GUI of BackupExec, put it over the capabilities of NetBackup, and not sell overlapping products that do the same thing!