Administrator Privileges Required for Configuration Changes
To enhance security and prevent unauthorized configuration changes, administrator privileges are now required to modify settings of the Backup Agent. This includes actions that can affect the stability, performance, or security of endpoints.
What's New
Starting with the Backup Agent version 8.1.1 for Windows, users must have administrator-level access to:
- Install the application
- Create or edit backup and restore plans
- Configure pre- and post-actions associated with backup and restore tasks (e.g., scripts that run before or after the plan execution)
- Modify settings that affect the endpoint’s configuration or operational behavior
Access for Non-Administrator Users
Backup service still may be started under a backup operator or an user account. Users who do not have administrator-level privileges will have read-only access to the Backup Agent environment. Specifically, they can:
- View, but not modify, plan settings within the Backup Agent interface
- Access the Agent installation folder, Program Files, and ProgramData directories related to the Backup Agent environment in read-only mode
- View Agent logs for monitoring or troubleshooting purposes
However, they cannot make any configuration changes or initiate actions that could impact backup execution or system behavior.
Who Is Affected
This change applies to all users associated with Backup Agent instances (endpoints). If a user lacks administrator privileges, configuration options become restricted in the user interface.
Why This Matters
Enforcing administrator privileges helps:
- Protect endpoint configurations from accidental or unauthorized changes
- Ensure proper execution of backup and restore procedures
- Maintain compliance with IT security policies and standards
What You Should Do
Ensure that users who need to create or manage backup plans on endpoints meet the following criteria:
- Are signed in as local or domain administrators on the endpoint