Self-service
With a pod design, the Service Provider can provide self-service capabilities for tenants via the Veeam Service Provider Console.
Given that each Public Cloud Appliance is dedicated to a specific tenant, the Service Provider may consider granting access to the appliance by providing the corresponding URL.
Depending on the aforementioned design choice, the Service Provider may opt to grant access to the dedicated VBR server. However, considering that this may be a managed service provided by the Service Provider, they may decide to restrict access and retain management of the Veeam Backup and Replication server.
However, the range of permissions that can be assigned to the customer may be limited. Based on field experience, it is advisable to assign the Restore Operator role. Additional details on role-based access control (RBAC) for the Public Cloud Appliance are provided below:
- RBAC for Veeam Backup for AWS: Detailed Guide
- RBAC for Veeam Backup for Microsoft Azure: Detailed Guide
- RBAC for Veeam Backup for Google Cloud: Detailed Guide