VMware vSphere privileges for NetBackup plug-in operations
This section details the privileges necessary for NetBackup plug-in operations within VMware vSphere, focusing on an instant virtual machine recovery and a full VM restore with different transport modes. These privileges need to be set at the vCenter server level.
See Instant virtual machine recovery.
See Full VM restore with transport mode: NBD.
See Full VM restore with transport mode: hotadd.
See Full VM restore with transport mode: SAN.
For instant virtual machine recovery, a set of privileges are required to perform the operations that are related to the datastore, global settings, host configuration, and more.
Allocate space
Browse datastore
Low level file operations
Enable methods
Disable methods
Configuration
Storage partition configuration
Assign network
Assign virtual machine to resource pool
Validate session
Change configuration
Acquire disk lease
Add existing disk
Add new disk
Add or remove device
Advanced configuration
Change settings
Change Swapfile placement
Change resource
Remove disk
Rename
Toggle disk change tracking
Edit inventory
Create new
Register
Remove
Unregister
Interaction
Power off
Power on
Provisioning
Allow disk access
Snapshot management
Create snapshot
Remove snapshot
The NBD transport mode requires additional privileges for the datastore, global settings, host configuration, and more.
Allocate space
Browse datastore
Low level file operations
Enable methods
Disable methods
Assign network
Assign virtual machine to resource pool
Validate session
Change configuration
Acquire disk lease
Add existing disk
Add new disk
Add or remove device
Advanced configuration
Change settings
Change Swapfile placement
Change resource
Configure Raw device
Remove disk
Rename
Toggle disk change tracking
Edit Inventory
Create new
Remove
Interaction
Power on
Provisioning
Allow disk access
Snapshot management
Create snapshot
Remove snapshot
Revert to snapshot
The hotadd transport mode requires additional privileges to update virtual machine files and allow read-only disk access and VM downloads.
Update virtual machine files
Update virtual machine metadata
Provisioning
Allow read-only disk access
Allow virtual machine download
The SAN transport mode requires the same privileges as the NBD transport mode.