Operational Defect Database
BugZero found this defect 901 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Veeam | kb4252
Features of Veeam Backup & Replication may not function when the Veeam Backup Service is run as a user that is not assigned the "Veeam Backup Administrator" role
Last update date:
12/14/2021
Affected products:
Veeam Backup & Replication
Affected releases:
11
Fixed releases:
No fixed releases provided.
Description:
Challenge
When the Veeam Backup Service is set to use a specific user as the service's "Log On" account, some features may not function correctly if that account is not assigned the Veeam Backup Administrator role.
Solution
Review the Users and Roles configuration and ensure that the account listed as "Log On As" for the Veeam Backup Service is also listed and assigned the Veeam Backup Administrator role.
More Information
Notes: Based on support cases, the most common cause of this issue relates to customers attempting to improve the security of Veeam Backup & Replication by removing the default "Administrators" group and neglecting to ensure that the account used by the Veeam Backup Service was added to the Users and Roles section. (This is only an issue when the Veeam Backup Service is not using the Local System as the log on.) This issue is uncommon because the Veeam Backup Service uses LocalSystem to Log On As in most environments. The most common reason to deviate from this is when the SQL Instance storing the Veeam Backup & Replication configuration database is on a different server than the Veeam Backup Server. This issue is made further rare because, by default, the "Administrators" local user group on the Veeam Backup Server is given the Veeam Backup Administrator role. Meaning that assuming the "Administrators" group was not removed, one would have to assign the Log On As to an account that is not a member of the Administrators group, which by default contains Domain Admins.
