Steps to allow the backup proxy to have access privilege to a specific resource pool
Step 1: Deploy the Druva Backup Proxy OVF
Deploy the Druva Backup Proxy OVF without activating it in the resource pool where you want access to virtual machines.
Step 2: Create a Resource Pool Admin User
Log in to vCenter as an Administrator.
Navigate to Menu > Administration > Single Sign-On > Users and Groups.
Select the correct domain and click Add User.
Create a new user with the required credentials.
Step 3: Assign Permissions to the New User
a. Host and Cluster View
Log in to vCenter and navigate to vCenter > Permissions.
Click the “+” icon to add permissions.
Select the newly created user and assign the Administrator role.
Uncheck the Propagate to children checkbox.
(Repeat these steps for the relevant resource pool hierarchy: Datacenter, Cluster, Host, etc.)For the Resource Pool, check the Propagate to children checkbox. This ensures the admin can access all virtual machines within the resource pool.
b. VM and Template View
Apply permissions to the folder hierarchy where virtual machines are organized.
Assign the Administrator role to the new user, and uncheck the Propagate to children checkbox.
c. Datastore View
Navigate to the Datastore View in vCenter.
Add permissions for all datastores where the VM disk files (VMDKs) are located.
Assign the Administrator role and uncheck the Propagate to children checkbox.
d. Network View
Go to the Network View in vCenter.
Add permissions for all networks and hierarchies that are utilized by the VMs.
Assign the Administrator role and uncheck the Propagate to children checkbox.
Step 4: Verify Permissions
Log in to vCenter using the newly created admin user.
Ensure that all resources (hosts, clusters, datastores, networks, etc.) are visible.
Step 5: Activate the Backup Proxy
Option 1: Activation via OVF Template
While deploying the OVF, provide the following details:
vCenter admin username in the format: admin_user@vsphere.local.
The Phoenix Activation Token.
Power on the backup proxy.
Option 2: Manual Configuration
Use the ProxyConf command to configure the vCenter admin details.
Use the PhoenixActivate command with the token to register the proxy with Phoenix.
Example of PhoenixActivate Command
/opt/Druva/Phoenix/bin/PhoenixActivate --token <Activation_Token>