Configuring a Backup role within Roles-based Administration (Enterprise Vault 10 and 11)

1. Log in to the Enterprise Vault Server as the Vault Service Account

2. In the Enterprise Vault Administration console, right-click on ‘Directory on serverAliasName’ then select 'Authorization Manager...'

3. Expand 'Definitions'

4. Right-click 'Role Definitions'

5. Select 'New Role Definition'

6. Give the new definition an appropriate Name, such as 'Backup Role', and Description

7. Select 'Add…' click on the 'Tasks' tab, then add the following Tasks:

   • EVT Manage Index Location Backup Mode
   • EVT Manage Vault Store Backup Mode
   • EVT Manage Enterprise Vault Stores

8. Press ‘OK’

9. Right-click on Role Assignments and select 'Assign Roles...'

10. Locate the ‘Backup Role’ definition created earlier and select it

11. Press ‘OK’

Assigning the Backup Exec Service Account to the Backup role

1. Log in to the Enterprise Vault Server as the Vault Service Account

2. In the Enterprise Vault Administration console, right-click on ‘Directory on serverAliasName’ then select 'Authorization Manager...'

3. Right click on the Role Assignment you created and select 'Assign Windows Users and Groups'

4. Add the Backup Exec Service Account to the object list and select 'Check Names' to be sure that the name is properly resolved

5. Press ‘OK’

Configuring a Backup role within Roles-based Administration (Enterprise Vault 12)
The "Authorization Manager" no longer exists in the Administration Console. All role-based administration assignment should be performed via the Enterprise Vault Management Shell. In order to protect vault stores, "Storage Administrator" role should be assigned to the Backup Exec logon account. In order to protect index location "Power Administrator" role should be assigned.

1. Log in to the Enterprise Vault server as the Vault Service Account
2. Launch the Enterprise Vault Management Shell
3. To assign "Storage Administration" role to the Backup Exec service account, run the following command
   • Add-EVRbaRoleMember -Identity "Storage Administrator" -Members "
4. To assign "Power Administrator" role to the Backup Exec service account, run the following command:
   • Add-EVRbaRoleMember -Identity "Power Administrator" -Members "

After this has been completed the following steps can be performed to test the permissions are working effectively.

1.  Log onto the Enterprise Vault server as the Account that was added above.

2. Launch the Enterprise Vault Management Shell

3. Run the following commands, and verify success.

   • Set-IndexLocationBackupMode

   • Clear-IndexLocationBackUpMode

   • Set-VaultStoreBackupMode

   • Clear-VaultStoreBackupMode

For more information please see "About Backup Mode cmlets" in the related articles below.

Also the Enterprise Vault services may need to be restarted for the above account changes to take effect.