In some environments, end users have restricted access to virtual machines. End users can only view information for virtual machines that they own, and have a limited set of operations that they can perform.
End User Access
The framework for defining user access to VMs is described in Restore Permissions and Ownership for CommCell Console Users.
You can assign the following permissions on virtual machine clients to control the operations that end users can perform:
-
Data Protection/Management Operations: Perform backups for their own VMs.
-
Browse: Browse virtual machine data.
-
In Place Recover: Recover files and folders to the source VM.
-
Live Browse: Browse files and folders from a backup that did not collect file details.
Note
If a virtual machine is configured to perform file system backups and is also included in backups for Virtual Server Agent backups, this permission is required in order to perform file system restores.
-
Out-of-Place Recover: Recover files and folders to a different location.
-
In Place Full Machine Recovery: Recover a full VM to the original location (requires Overwrite on Restore permission).
-
Out of Place Full Machine Recovery: Recover a full VM to a different location.
-
Overwrite on Restore: Overwrite the original VM with the restored VM.
End User Operations
For Service Pack 12 and later, the following changes apply to end user operations for virtual machines:
-
In CommCell Console, the Client Computers node in the CommCell Browser shows only the clients for virtual machines that the end user owns.
-
An end user can only view job history for virtual machines that the user owns.
-
An end user can initiate a restore by choosing All Tasks > Browse and Restore from the VM client. From a VM client, an end user can restore only guest files and folders. When the user initiates a restore, the Client tab shows files and folders that can be restored.
By default, files are restored to the original VM, but if the user has access to other clients that appear under Client Computers, the user can specify one of those clients as the restore destination.
Infrastructure details such as the VSA proxy, ESX host, and datastore are hidden from end users.
-
If a guest agent is installed on a VM client and used for backups in addition to VSA backups, the VSA backup might not have the most recent files. You can use job history to see the most recent backups across all agents.