Manage backup without administrator

[StiffBoard]

Want to minimize priviligies for those who will administer backup. Using AD groups for RDP access and Backup operator using group policy. Also given the groups permission to start/stop services and full control on ProgramFiles\Tivoli using group policy. But as nodes are renamed, it works well to update password but when it comes to running the wizard to change nodename in CAD services it stops. Only new scheduler is available, not Update existing scheduler. Any ideas? Setting full control on registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TSM Client Acceptor?

If this isn't possible to do I don't want to distribute any more tweaks to my servers.

Anyone succesful with giving Backup operators anything less than Administrator? Maybe Backup operator group is not used anymore? Spectrum doesn't seem to consider this group when writing in filestystem or registry.

 

[moon-buddy]

The Backup Operator group in Windows is primarily for native Windows backup.

If you want to limit privileges, setup an account on TSM that only has Operator rights and/or rights to just the node he/she is logging into.

 

[marclant]

You can backup/restore files and systemstate as Backup Operators: https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.4/client/c_start_bogroup.html

You need administrator to backup the ASR writer, which is needed if you plan to do an ASR restore, which is the recommended and preferred method to restore Windows.