Forum Discussion

AndersA's avatar
AndersA
Level 4
8 years ago

Netbackup Exchnage 2016 GRT Permissions

Hallo All.

Can anybody plz tell me which permissions the exchange/AD account should have.

what is needed for restore and what is needed for backup only.

plz dont refer me to the admin guide......i have lookeed at it :)....what persmissions are you using ? :)

 

 

 

8
windows server 2012
  • Lowell_Palecek's avatar
    Lowell_Palecek
    8 years ago

    I had a long response, but Vox lost it. Here's my short answer.

    For GRT backup but not restore, you don't need to create an EWSImpersonation role or a throttling policy.

    In the rolegroup we tell you to create, you don't need recipient creation. You may not need recipient policies.

    Be advised that you can't back up passive database copies with the "minimal user." You need a user that is a member of Organization Management or Domain Admins. That's because the Active Directory System Interface (ADSI) API does not enumerate database copies for the minimal user.

  • Lowell_Palecek's avatar
    Lowell_Palecek
    Level 6
    8 years ago

    I had a long response, but Vox lost it. Here's my short answer.

    For GRT backup but not restore, you don't need to create an EWSImpersonation role or a throttling policy.

    In the rolegroup we tell you to create, you don't need recipient creation. You may not need recipient policies.

    Be advised that you can't back up passive database copies with the "minimal user." You need a user that is a member of Organization Management or Domain Admins. That's because the Active Directory System Interface (ADSI) API does not enumerate database copies for the minimal user.

  • RiaanBadenhorst's avatar
    RiaanBadenhorst
    Level 6
    8 years ago

    What is wrong with the admin guide? There is an entire section dedicated to this topic

    "Configuring the account for NetBackup Exchange operations"

    In the version 8 documents is section 4. 

    Is something not clear? Please let me know so I can inform Veritas if there is any ambiguity or it is not clear what the required permissions are.

    • AndersA's avatar
      AndersA
      Level 4
      8 years ago

      Its not clear to me what rights i should have, to only do a backup (not restore)

      • RiaanBadenhorst's avatar
        RiaanBadenhorst
        Level 6
        8 years ago

        "NetBackup gains access to Exchange through the account for NetBackup Exchange operations, an Active Directory user account that is associated with a unique Exchange mailbox. This mailbox has sufficient roles or group memberships to perform backups and restores. Use the account for NetBackup Exchange operations for the Exchange credentials in the Exchange client host properties."

         

        There is no seperate requirement for restore. You should however pay attention to the distributed application mapping as it comes into play more during restore, than during backups i.e you can probably perform backups successfully (even with GRT) without defining it, but restore most certainly will fail.