Veeam Yedekleme ve \u00c7o\u011faltma S\u00fcr\u00fcm 12<\/li>\n<\/ul>\n
\n<# .SYNOPSIS New_vCenterRole_Veeam.ps1 - PowerShell Script to create a new vCenter Role with all the required permission for Veeam Backup & Replication. .DESCRIPTION This script is used to create a new role on your vCenter server. The newly created role will be filled with the needed permissions for using it with Veeam Backup & Replication The permissions are based on the Veeam Help Center Cumulative Permissions and can be found here: https:\/\/helpcenter.veeam.com\/docs\/backup\/permissions\/cumulativepermissions.html?ver=120 .OUTPUTS Results are printed to the console. .NOTES Author Falko Banaszak, https:\/\/virtualhome.blog, Twitter: @Falko_Banaszak Contributor Dean Lewis, https:\/\/veducate.co.uk, Twitter: @SaintDLE Change Log V1.00, 21\/04\/2020 - Initial version: Creates a new vCenter role with privileges required for Veeam Backup & Replication operations Change Log V2.00, 06\/08\/2021 - Second version: Updated the script to use the Veeam Backup & Replication Version 11 cumulative privileges Change Log V2.01, 07\/10\/2021 - Second version revision: Add missing \"VirtualMachine.Config.Annotation\" Change Log V3.00, 07\/15\/2023 - Updated code for better error handling, added ability to check if role exists and add missing permissions to existing role, added ability to add user to new role .LICENSE MIT License Copyright (c) 2019 Falko Banaszak Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and\/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. #><\/code><\/p>\n# Here are all necessary and cumualative vCenter Privileges needed for all operations of Veeam Backup & Replication V12
\n$VeeamPrivileges = @(
\n‘Cryptographer.Access’,
\n‘Cryptographer.AddDisk’,
\n‘Cryptographer.Encrypt’,
\n‘Cryptographer.EncryptNew’,
\n‘Cryptographer.Migrate’,
\n‘DVPortgroup.Create’,
\n‘DVPortgroup.Delete’,
\n‘DVPortgroup.Modify’,
\n‘Datastore.AllocateSpace’,
\n‘Datastore.Browse’,
\n‘Datastore.Config’,
\n‘Datastore.DeleteFile’,
\n‘Datastore.FileManagement’,
\n‘Extension.Register’,
\n‘Extension.Unregister’,
\n‘Folder.Create’,
\n‘Folder.Delete’,
\n‘Global.Diagnostics’,
\n‘Global.DisableMethods’,
\n‘Global.EnableMethods’,
\n‘Global.Licenses’,
\n‘Global.LogEvent’,
\n‘Global.ManageCustomFields’,
\n‘Global.SetCustomField’,
\n‘Global.Settings’,
\n‘Host.Config.AdvancedConfig’,
\n‘Host.Config.Maintenance’,
\n‘Host.Config.Network’,
\n‘Host.Config.Patch’,
\n‘Host.Config.Storage’,
\n‘InventoryService.Tagging.AttachTag’,
\n‘InventoryService.Tagging.ObjectAttachable’,
\n‘Network.Assign’,
\n‘Network.Config’,
\n‘Resource.AssignVMToPool’,
\n‘Resource.ColdMigrate’,
\n‘Resource.CreatePool’,
\n‘Resource.DeletePool’,
\n‘Resource.HotMigrate’,
\n‘StoragePod.Config’,
\n‘StorageProfile.Update’,
\n‘StorageProfile.View’,
\n‘System.Anonymous’,
\n‘System.Read’,
\n‘System.View’,
\n‘VApp.AssignResourcePool’,
\n‘VApp.AssignVM’,
\n‘VApp.Unregister’,
\n‘VirtualMachine.Config.AddExistingDisk’,
\n‘VirtualMachine.Config.AddNewDisk’,
\n‘VirtualMachine.Config.AddRemoveDevice’,
\n‘VirtualMachine.Config.AdvancedConfig’,
\n‘VirtualMachine.Config.Annotation’,
\n‘VirtualMachine.Config.ChangeTracking’,
\n‘VirtualMachine.Config.DiskExtend’,
\n‘VirtualMachine.Config.DiskLease’,
\n‘VirtualMachine.Config.EditDevice’,
\n‘VirtualMachine.Config.RawDevice’,
\n‘VirtualMachine.Config.RemoveDisk’,
\n‘VirtualMachine.Config.Rename’,
\n‘VirtualMachine.Config.Resource’,
\n‘VirtualMachine.Config.Settings’,
\n‘VirtualMachine.GuestOperations.Execute’,
\n‘VirtualMachine.GuestOperations.Modify’,
\n‘VirtualMachine.GuestOperations.Query’,
\n‘VirtualMachine.Interact.ConsoleInteract’,
\n‘VirtualMachine.Interact.DeviceConnection’,
\n‘VirtualMachine.Interact.GuestControl’,
\n‘VirtualMachine.Interact.PowerOff’,
\n‘VirtualMachine.Interact.PowerOn’,
\n‘VirtualMachine.Interact.SetCDMedia’,
\n‘VirtualMachine.Interact.SetFloppyMedia’,
\n‘VirtualMachine.Interact.Suspend’,
\n‘VirtualMachine.Inventory.Create’,
\n‘VirtualMachine.Inventory.Delete’,
\n‘VirtualMachine.Inventory.Register’,
\n‘VirtualMachine.Inventory.Unregister’,
\n‘VirtualMachine.Inventory.Move’,
\n‘VirtualMachine.Provisioning.DiskRandomAccess’,
\n‘VirtualMachine.Provisioning.DiskRandomRead’,
\n‘VirtualMachine.Provisioning.GetVmFiles’,
\n‘VirtualMachine.Provisioning.MarkAsTemplate’,
\n‘VirtualMachine.Provisioning.MarkAsVM’,
\n‘VirtualMachine.Provisioning.PutVmFiles’,
\n‘VirtualMachine.State.CreateSnapshot’,
\n‘VirtualMachine.State.RemoveSnapshot’,
\n‘VirtualMachine.State.RenameSnapshot’,
\n‘VirtualMachine.State.RevertToSnapshot’)<\/p>\n
# Load the PowerCLI SnapIn and set the configuration
\nif (!(Get-PSSnapin VMware.VimAutomation.Core -ErrorAction SilentlyContinue)) {
\nAdd-PSSnapin VMware.VimAutomation.Core
\n}
\nSet-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false | Out-Null<\/p>\n
# Get the vCenter Server Name to connect to
\n$vCenterServer = Read-Host “Enter vCenter Server host name (DNS with FQDN or IP address)”<\/p>\n
# Get User to connect to vCenter Server
\n$vCenterUser = Read-Host “Enter your user name (DOMAIN\\User or user@domain.com)”<\/p>\n
# Get Password to connect to the vCenter Server
\n$vCenterUserPassword = Read-Host “Enter your password (no worries it is a secure string)” -AsSecureString:$true<\/p>\n
# Collect username and password as credentials
\n$Credentials = New-Object System.Management.Automation.PSCredential -ArgumentList $vCenterUser,$vCenterUserPassword<\/p>\n
# Connect to the vCenter Server with collected credentials
\nif(!(Connect-VIServer -Server $vCenterServer -Credential $Credentials -ErrorAction Silently)) {
\nWrite-Host “Error: Could not connect to vCenter server $vCenterServer” -ForegroundColor Red
\nexit 1
\n}
\nWrite-Host “Connected to your vCenter server $vCenterServer” -ForegroundColor Green<\/p>\n
# Provide a name for your new role
\n$NewRole = Read-Host “Enter your desired name for the new vCenter role”<\/p>\n
# Check if the role already exists
\n$existingRole = Get-VIRole -Name $NewRole -ErrorAction SilentlyContinue
\nif ($existingRole) {
\nWrite-Host “A role with the name $NewRole already exists.” -ForegroundColor Yellow<\/p>\n
# Get the current privileges of the role
\n$currentPrivileges = $existingRole.PrivilegeList | Sort-Object<\/p>\n
# Compare the current privileges with the required privileges
\n$missingPrivileges = $VeeamPrivileges | Where-Object { $_ -notin $currentPrivileges }<\/p>\n
if ($missingPrivileges) {
\nWrite-Host “The role $NewRole is missing the following privileges:” -ForegroundColor Yellow
\nWrite-Host ($missingPrivileges -join “`n”)<\/p>\n
# Ask the user whether they want to add the missing privileges
\n$choice = Read-Host “Do you want to add the missing privileges to the role $NewRole? (yes\/no)”
\nif ($choice -eq “yes”) {
\n# Add the missing privileges to the role
\n$rolePrivileges = $existingRole.PrivilegeList + $missingPrivileges
\nSet-VIRole -Role $existingRole -AddPrivilege (Get-VIPrivilege -Id $rolePrivileges) | Out-Null
\nWrite-Host “The missing privileges have been added to the role $NewRole.” -ForegroundColor Green
\n} else {
\nWrite-Host “The missing privileges have not been added to the role $NewRole.” -ForegroundColor Yellow
\n}
\n} else {
\nWrite-Host “The role $NewRole already has all the required privileges.” -ForegroundColor Green
\n}<\/p>\n
# Exit the script since the user chose not to add the missing privileges or there were no missing privileges
\nexit 1
\n}<\/p>\n
Write-Host “Thanks, your new vCenter role will be named $NewRole” -ForegroundColor Green<\/p>\n
# Creating the new role with the needed permissions
\nNew-VIRole -Name $NewRole -Privilege (Get-VIPrivilege -Id $VeeamPrivileges) | Out-Null
\nWrite-Host “Your new vCenter role has been created, here it is:” -ForegroundColor Green
\nGet-VIRole -Name $NewRole | Select-Object Description, PrivilegeList, Server, Name | Format-List<\/p>\n
# Ask if a user should be assigned to the role
\n$assignUser = Read-Host “Do you want to assign a user to the role $NewRole, this be be added at the root level of vCenter? (yes\/no)”
\nif ($assignUser -eq “yes”) {
\n# Get the user information
\n$userName = Read-Host “Enter the user name (DOMAIN\\User or user@domain.com)”<\/p>\n
# Assign the user to the role
\nNew-VIPermission -Entity (Get-Folder “Datacenters” -Type Datacenter | Where { $_.ParentId -eq $null }) -Principal $userName -Role $NewRole -Propagate:$true
\nWrite-Host “The user $userName has been assigned to the role $NewRole.” -ForegroundColor Green
\n}<\/p>\n
# Disconnecting from the vCenter Server
\nDisconnect-VIServer -Confirm:$false
\nWrite-Host “Disconnected from your vCenter Server $vCenterServer – have a Veeamazing day :)” -ForegroundColor Green<\/p>\n
<\/p>\n
<\/span>2- Y\u00f6ntem Vcenter Aray\u00fcz\u00fcnden K\u0131s\u0131tl\u0131 Kullan\u0131c\u0131 Eklemek<\/span><\/h3>\nVcenter -> Role k\u0131sm\u0131ndan ekle diyerek a\u015fa\u011f\u0131daki se\u00e7enekleri se\u00e7iyoruz ve rol\u00fc kaydedip \u00e7\u0131k\u0131yoruz.<\/p>\n
\n\n\n| Privilege Level<\/th>\n | Required Permissions<\/th>\n<\/tr>\n |
\n| \n Direct SAN Access Mode<\/span><\/p>\n<\/td>\n | \n Virtual Appliance Mode<\/span><\/p>\n<\/td>\n | \n Network Mode<\/span><\/p>\n<\/td>\n<\/tr>\n\n| \n Cryptographic operations<\/span><\/p>\n<\/td>\n | Direct Access<\/td>\n | Direct Access<\/td>\n | Direct Access<\/td>\n<\/tr>\n | \n| \n Datastore<\/span><\/p>\n<\/td>\n | Low-level file operations<\/td>\n | Low-level file operations<\/td>\n | Low-level file operations<\/td>\n<\/tr>\n | \n| \n Global<\/span><\/p>\n<\/td>\n | Disable methods
\nEnable methods
\nLicenses
\nLog event
\nManage custom attributes
\nSet custom attribute<\/td>\n | Disable methods
\nEnable methods
\nLicenses
\nLog event
\nManage custom attributes
\nSet custom attribute<\/td>\n | Disable methods
\nEnable methods
\nLicenses
\nLog event
\nManage custom attributes
\nSet custom attribute<\/td>\n<\/tr>\n | \n| \n Datastore cluster<\/span><\/p>\n<\/td>\n | Configure a datastore cluster<\/td>\n | Configure a datastore cluster<\/td>\n | Configure a datastore cluster<\/td>\n<\/tr>\n | \n| \n Virtual Machine<\/span><\/p>\n<\/td>\n | \n Change Configuration<\/span><\/p>\n<\/td>\n | Acquire disk lease
\nAdvanced configuration
\nSet Annotation
\nToggle disk change tracking<\/td>\n | Acquire disk lease
\nAdd existing disk
\nAdd or remove device
\nAdvanced configuration
\nConfigure RAW device (if machines have Virtual Compatibility RDM disks)
\nRemove disk
\nSet annotation
\nToggle disk change tracking<\/td>\n | Acquire disk lease
\nAdvanced configuration
\nSet annotation
\nToggle disk change tracking<\/td>\n<\/tr>\n | \n| \n Guest operations<\/span><\/p>\n<\/td>\n | Guest operation modifications
\nGuest operation program execution
\nGuest operation queries<\/td>\n | Guest operation modifications
\nGuest operation program execution
\nGuest operation queries<\/td>\n | Guest operation modifications
\nGuest operation program execution
\nGuest operation queries<\/td>\n<\/tr>\n | \n| \n Interaction<\/span><\/p>\n<\/td>\n | Guest operating system management by VIX API<\/td>\n | Guest operating system management by VIX API<\/td>\n | Guest operating system management by VIX API<\/td>\n<\/tr>\n | \n| \n Provisioning<\/span><\/p>\n<\/td>\n | Allow read-only disk access
\nAllow virtual machine download<\/td>\n | Allow read-only disk access
\nAllow virtual machine download<\/td>\n | Allow read-only disk access
\nAllow virtual machine download<\/td>\n<\/tr>\n | \n| \n Snapshot Management<\/span><\/p>\n<\/td>\n | Create snapshot
\nRemove snapshot<\/td>\n | Create snapshot
\nRemove snapshot<\/td>\n | Create snapshot
\nRemove snapshot<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\nDaha sonras\u0131nda Vcenter -> User Group k\u0131sm\u0131ndan kullan\u0131c\u0131 ekle diyerek kullan\u0131c\u0131 ad\u0131 ve \u015fifremizi yaz\u0131p role k\u0131sm\u0131ndan yukar\u0131da olu\u015fturdu\u011fumuz rol\u00fc se\u00f6iyoruz.<\/p>\n <\/p>\n \u0130\u015flemler bu kadar.<\/p>\n","protected":false},"excerpt":{"rendered":" Son zamanlarda artan ESXI hacklenmelerine kar\u015f\u0131 \u00f6nlem almak amac\u0131yla veeam backup ve vcenter kullan\u0131c\u0131lar\u0131 i\u00e7in nas\u0131l k\u0131s\u0131tl\u0131 bir kullan\u0131c\u0131 olu\u015fturulur bu makalede de\u011finece\u011fiz. 1- Y\u00f6ntem PowerShell ile Vcenter Kullan\u0131c\u0131 olu\u015fturmak Bu PowerShell \/ PowerCLI beti\u011fi, Veeam Backup & Replication V12 ile kullanmak i\u00e7in t\u00fcm k\u00fcm\u00fclatif ayr\u0131cal\u0131klara ve izinlere sahip yeni bir vCenter sunucu rol\u00fc olu\u015fturman\u0131za …<\/p>\n","protected":false},"author":1,"featured_media":8290,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,5],"tags":[],"class_list":["post-8289","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-esxi","category-linux"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/8289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=8289"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/8289\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/8290"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=8289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=8289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=8289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} | |