If you wish to assign permissions to a user account in vCenter specifically for Altaro VM Backup, you need to configure the correct privileges for backup and restore operations to take place successfully. The following permissions apply to vCenter 5.0 and later, with a notable difference in the below table for vCenter 5.1 and later.


To create an account an assign the permissions, you can follow these steps:


  1. Go to [Administration] > [Roles]

  2. Click on [Add Role]

  3. Enter a name for the role, such as Altaro VM Backup

  4. Assign the following permissions to this account:
     

    Section

    Privileges

    Cryptographic operations

    • 

    Encrypt

    • 

    Migrate

    dvPort Group

    • 

    Create

    • 

    Delete

    • 

    Modify

    Datastore

    Extension

    Folder

    Global

    Host > Configuration

    Host > Inventory

    Host > Local Operations

    vSphere Tagging

    Network

    Resource

    • 

    Assign vApp to resource pool

    • 

    Assign virtual machine to resource pool

    • 

    Create resource pool

    • 

    Migrate powered off virtual machine

    • 

    Migrate powered on virtual machine


    Remove resource pool

    Tasks

    Datastore cluster

    Profile-driven storage

    • 

    Profile-drive storage update


    Profile-driven storage view

    vApp

    • 

    Import


    Add virtual machine

    Assign resource pool

    Unregister

    Virtual Machine > Configuration

    Guest operations

    • 

    Guest operation modifications


    Guest operation program execution

    Guest operation queries

    Virtual Machine > Interaction

    • 

    Configure floppy media


    Console interaction

    • 

    VMware Tools Install


    Suspend

    Virtual Machine > Edit Inventory

    • 

    Remove

    Virtual Machine > Provisioning

    Virtual Machine > Snapshot management

    • 

    Remove snapshot


    Rename snapshot


  5. Go back to the [Hosts and Clusters] view

  6. Click on the top-level vCenter and go to the [Permissions] tab

  7. Add the specific user account you're looking to use, then assign the newly created User Role


  8. Ensure that the vCenter is added from Altaro using this user account