Skip to content

Commit 5488110

Browse files
v-albemiv-albemi
authored
Merge pull request #101377 from dcurwin/jan162020
Two changes
2 parents 0425510 + 8fd6d4a commit 5488110

File tree

2 files changed

+51
-36
lines changed

2 files changed

+51
-36
lines changed

‎articles/backup/backup-azure-backup-server-vmware.md

Lines changed: 41 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ This article explains how to:
1818

1919
## Before you start
2020

21-
- Verify that you're running a version of vCenter/ESXi that's supported for backup - versions 6.5, 6.0, and 5.5.
21+
- Verify that you're running a version of vCenter/ESXi that's supported for backup. Refer to the support matrix [here](https://docs.microsoft.com/azure/backup/backup-mabs-protection-matrix).
2222
- Make sure you've set up Azure Backup Server. If you haven't, [do that](backup-azure-microsoft-azure-backup.md) before you start. You should be running Azure Backup Server with the latest updates.
2323

2424
## Create a secure connection to the vCenter Server
@@ -124,26 +124,41 @@ The Azure Backup Server needs a user account with permissions to access v-Center
124124

125125
### Role permissions
126126

127-
**6.5/6.0** | **5.5**
128-
--- | ---
129-
Datastore.AllocateSpace | Datastore.AllocateSpace
130-
Global.ManageCustomFields | Global.ManageCustomFields
131-
Global.SetCustomField |
132-
Host.Local.CreateVM | Network.Assign
133-
Network.Assign |
134-
Resource.AssignVMToPool |
135-
VirtualMachine.Config.AddNewDisk | VirtualMachine.Config.AddNewDisk
136-
VirtualMachine.Config.AdvancedConfig| VirtualMachine.Config.AdvancedConfig
137-
VirtualMachine.Config.ChangeTracking| VirtualMachine.Config.ChangeTracking
138-
VirtualMachine.Config.HostUSBDevice |
139-
VirtualMachine.Config.QueryUnownedFiles |
140-
VirtualMachine.Config.SwapPlacement| VirtualMachine.Config.SwapPlacement
141-
VirtualMachine.Interact.PowerOff| VirtualMachine.Interact.PowerOff
142-
VirtualMachine.Inventory.Create| VirtualMachine.Inventory.Create
143-
VirtualMachine.Provisioning.DiskRandomAccess |
144-
VirtualMachine.Provisioning.DiskRandomRead | VirtualMachine.Provisioning.DiskRandomRead
145-
VirtualMachine.State.CreateSnapshot | VirtualMachine.State.CreateSnapshot
146-
VirtualMachine.State.RemoveSnapshot | VirtualMachine.State.RemoveSnapshot
127+
| **Privileges for vCenter 6.5 and above user account** | **Privileges for vCenter 6.0 user account** | **Privileges for vCenter 5.5 user account** |
128+
| ------------------------------------------------------------ | --------------------------------------------------------- | ------------------------------------------- |
129+
| Datastore.AllocateSpace | | |
130+
| Datastore.Browse datastore | Datastore.AllocateSpace | Network.Assign |
131+
| Datastore.Low-level file operations | Global.Manage custom attributes | Datastore.AllocateSpace |
132+
| Datastore cluster.Configure a datatstore cluster | Global.Set custom attribute | VirtualMachine.Config.ChangeTracking |
133+
| Global.Disable methods | Host.Local operations.Create virtual machine | VirtualMachine.State.RemoveSnapshot |
134+
| Global.Enable methods | Network. Assign network | VirtualMachine.State.CreateSnapshot |
135+
| Global.Licenses | Resource. Assign virtual machine to resource pool | VirtualMachine.Provisioning.DiskRandomRead |
136+
| Global.Log event | Virtual machine.Configuration.Add new disk | VirtualMachine.Interact.PowerOff |
137+
| Global.Manage custom attributes | Virtual machine.Configuration.Advanced | VirtualMachine.Inventory.Create |
138+
| Global.Set custom attribute | Virtual machine.Configuration.Disk change tracking | VirtualMachine.Config.AddNewDisk |
139+
| Network.Assign network | Virtual machine.Configuration.Host USB device | VirtualMachine.Config.HostUSBDevice |
140+
| Resource. Assign virtual machine to resource pool | Virtual machine.Configuration.Query unowned files | VirtualMachine.Config.AdvancedConfig |
141+
| Virtual machine.Configuration.Add new disk | Virtual machine.Configuration.Swapfile placement | VirtualMachine.Config.SwapPlacement |
142+
| Virtual machine.Configuration.Advanced | Virtual machine.Interaction.Power Off | Global.ManageCustomFields |
143+
| Virtual machine.Configuration.Disk change tracking | Virtual machine.Inventory. Create new | |
144+
| Virtual machine.Configuration.Disk lease | Virtual machine.Provisioning.Allow disk access | |
145+
| Virtual machine.Configuration.Extend virtual disk | Virtual machine.Provisioning. Allow read-only disk access | |
146+
| Virtual machine.Guest Operations.Guest Operation Modifications | Virtual machine.Snapshot management.Create snapshot | |
147+
| Virtual machine.Guest Operations.Guest Operation Program Execution | Virtual machine.Snapshot management.Remove Snapshot | |
148+
| Virtual machine.Guest Operations.Guest Operation Queries | | |
149+
| Virtual machine .Interaction .Device connection | | |
150+
| Virtual machine .Interaction .Guest operating system management by VIX API | | |
151+
| Virtual machine .Inventory.Register | | |
152+
| Virtual machine .Inventory.Remove | | |
153+
| Virtual machine .Provisioning.Allow disk access | | |
154+
| Virtual machine .Provisioning.Allow read-only disk access | | |
155+
| Virtual machine .Provisioning.Allow virtual machine download | | |
156+
| Virtual machine .Snapshot management. Create snapshot | | |
157+
| Virtual machine .Snapshot management.Remove Snapshot | | |
158+
| Virtual machine .Snapshot management.Revert to snapshot | | |
159+
| vApp.Add virtual machine | | |
160+
| vApp.Assign resource pool | | |
161+
| vApp.Unregister | | |
147162

148163
## Create a VMware account
149164

@@ -326,21 +341,21 @@ To back up vSphere 6.7, do the following:
326341
- Set the registry keys as follows:
327342

328343
```text
329-
344+
330345
Windows Registry Editor Version 5.00
331-
346+
332347
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727]
333348
"SystemDefaultTlsVersions"=dword:00000001
334349
"SchUseStrongCrypto"=dword:00000001
335-
350+
336351
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
337352
"SystemDefaultTlsVersions"=dword:00000001
338353
"SchUseStrongCrypto"=dword:00000001
339-
354+
340355
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
341356
"SystemDefaultTlsVersions"=dword:00000001
342357
"SchUseStrongCrypto"=dword:00000001
343-
358+
344359
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
345360
"SystemDefaultTlsVersions"=dword:00000001
346361
"SchUseStrongCrypto"=dword:00000001

‎articles/backup/backup-rbac-rs-vault.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -30,25 +30,25 @@ The following table captures the Backup management actions and corresponding min
3030
| Create Recovery Services vault | Backup Contributor | Resource group containing the vault |
3131
| Enable backup of Azure VMs | Backup Operator | Resource group containing the vault |
3232
| | Virtual Machine Contributor | VM resource |
33-
| On-demand backup of VM | Backup Operator | Recovery vault resource |
33+
| On-demand backup of VM | Backup Operator | Recovery Services vault |
3434
| Restore VM | Backup Operator | Recovery Services vault |
3535
| | Contributor | Resource group in which VM will be deployed |
3636
| | Virtual Machine Contributor | Source VM that got backed up |
37-
| Restore unmanaged disks VM backup | Backup Operator | Recovery vault resource |
37+
| Restore unmanaged disks VM backup | Backup Operator | Recovery Services vault |
3838
| | Virtual Machine Contributor | Source VM that got backed up |
3939
| | Storage Account Contributor | Storage account resource where disks are going to be restored |
40-
| Restore managed disks from VM backup | Backup Operator | Recovery vault resource |
40+
| Restore managed disks from VM backup | Backup Operator | Recovery Services vault |
4141
| | Virtual Machine Contributor | Source VM that got backed up |
4242
| | Storage Account Contributor | Temporary Storage account selected as part of restore to hold data from vault before converting them to managed disks |
4343
| | Contributor | Resource group to which managed disk(s) will be restored |
44-
| Restore individual files from VM backup | Backup Operator | Recovery vault resource |
44+
| Restore individual files from VM backup | Backup Operator | Recovery Services vault |
4545
| | Virtual Machine Contributor | Source VM that got backed up |
46-
| Create backup policy for Azure VM backup | Backup Contributor | Recovery vault resource |
47-
| Modify backup policy of Azure VM backup | Backup Contributor | Recovery vault resource |
48-
| Delete backup policy of Azure VM backup | Backup Contributor | Recovery vault resource |
49-
| Stop backup (with retain data or delete data) on VM backup | Backup Contributor | Recovery vault resource |
50-
| Register on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Operator | Recovery vault resource |
51-
| Delete registered on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Contributor | Recovery vault resource |
46+
| Create backup policy for Azure VM backup | Backup Contributor | Recovery Services vault |
47+
| Modify backup policy of Azure VM backup | Backup Contributor | Recovery Services vault |
48+
| Delete backup policy of Azure VM backup | Backup Contributor | Recovery Services vault |
49+
| Stop backup (with retain data or delete data) on VM backup | Backup Contributor | Recovery Services vault |
50+
| Register on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Operator | Recovery Services vault |
51+
| Delete registered on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Contributor | Recovery Services vault |
5252

5353
> [!IMPORTANT]
5454
> If you specify VM Contributor at a VM resource scope and click on Backup as part of VM settings, it will open 'Enable Backup' screen even though VM is already backed up as the call to verify backup status works only at subscription level. To avoid this, either go to vault and open the backup item view of the VM or specify VM Contributor role at a subscription level.

0 commit comments

Comments
 (0)