Druva

Steps to allow the backup proxy to have access privilege to a specific resource pool

Deploy Druva Backup Proxy OVF (do not activate) in the same resource pool for which you want to get the listing of virtual machines.

Create an admin for the resource pool. (This admin will be using during activation). Go to Menu &gt; Administration &gt; Single sign on &gt; Users and group &gt; select the correct domain &gt; click Add User.

Add permission of the new user for each entity for which you want the access for all the views: Host and Cluster view, VM and template view, Storage view, and Network view.

- Apply permission to the Host and cluster view .
 
 1. Login to vCenter and click on vCenter &gt; Permission tab. 
 
 image003.png
 2. Click on “+” icon and add permission with the user. Select role as Administrator and un-check the Propagate to children checkbox. 
 
 image006.jpg
 3. Perform the same steps for the resource pool hierarchy which is: datacenter, cluster, host, etc .
 4. Select the resource pool and change the permission of it by selecting the Propagate to children checkbox. This will ensure all VMs can be accessed by admin. 
 
 image008.jpg
- Apply permission to the VM and template view.
 
 - Apply permission in the folder hierarchy as well. Uncheck the Propagate to children checkbox.
- Apply permission to the datastore view.
 
 - Perform similar steps for the datastore view. Ensure that you add permission to all the datastores where the vmdks resides. Uncheck the Propagate to children checkbox.
- Apply permission to Network view.
 
 - Perform similar steps for the Network view. Ensure that you add permission to all the Network and hierarchy that all the residing VMs utilize. Uncheck the Propagate to children checkbox.

Verify all resources are visible in the vCenter by logging in with the newly created administrator.

Enter the newly created vCenter admin details and Phoenix Activation token in the OVF template and power on the backup proxy.

Username should be in format: <a href="mailto:tes1@vsphere.local" rel="nofollow noopener noreferrer" target="_blank">tes1@vsphere.local</a>

Use the <code>ProxyConf</code> command to configure vCenter admin details.

Use the <code>PhoenixActivate</code> command with a token to get it registered with Phoenix.

1. Deploy Druva Backup Proxy OVF (do not activate) in the same resource pool for which you want to get the listing of virtual machines.
2. Create an admin for the resource pool. (This admin will be using during activation). Go to Menu &gt; Administration &gt; Single sign on &gt; Users and group &gt; select the correct domain &gt; click Add User. 
 
 image001.png
3. Log in to vCenter as Administrator.
4. Add permission of the new user for each entity for which you want the access for all the views: Host and Cluster view, VM and template view, Storage view, and Network view.
 
 - Apply permission to the Host and cluster view .
 
 1. Login to vCenter and click on vCenter &gt; Permission tab. 
 
 image003.png
 2. Click on “+” icon and add permission with the user. Select role as Administrator and un-check the Propagate to children checkbox. 
 
 image006.jpg
 3. Perform the same steps for the resource pool hierarchy which is: datacenter, cluster, host, etc .
 4. Select the resource pool and change the permission of it by selecting the Propagate to children checkbox. This will ensure all VMs can be accessed by admin. 
 
 image008.jpg
 - Apply permission to the VM and template view.
 
 - Apply permission in the folder hierarchy as well. Uncheck the Propagate to children checkbox.
 - Apply permission to the datastore view.
 
 - Perform similar steps for the datastore view. Ensure that you add permission to all the datastores where the vmdks resides. Uncheck the Propagate to children checkbox.
 - Apply permission to Network view.
 
 - Perform similar steps for the Network view. Ensure that you add permission to all the Network and hierarchy that all the residing VMs utilize. Uncheck the Propagate to children checkbox.
5. Verify all resources are visible in the vCenter by logging in with the newly created administrator.
6. Activate the backup proxy.
 
 Enter the newly created vCenter admin details and Phoenix Activation token in the OVF template and power on the backup proxy.
 
 Username should be in format: <a href="mailto:tes1@vsphere.local" rel="nofollow noopener noreferrer" target="_blank">tes1@vsphere.local</a>
 
 Or
 
 Use the <code>ProxyConf</code> command to configure vCenter admin details.
 
 Use the <code>PhoenixActivate</code> command with a token to get it registered with Phoenix.