71
Copyright © Acronis, Inc., 2000-2010
Suppose that two users on a machine, UserA and UserB, perform backups from this machine to a
centralized vault managed by a storage node. On the storage node, let these users have regular (non-
administrative) accounts UserA_SN and UserB_SN, respectively.
Normally, UserA can access only the archives created by UserA (and owned by UserA_SN), and UserB
can access only the archives created by UserB (and owned by UserB_SN).
However, if UserA is a member of the Administrators group on the machine, this user can
additionally access the archives created from this machine by UserB—even though UserA's account
on the storage node is a regular one.
2.12.7.6
Management server administrator rights
Normally, the Acronis Backup & Recovery 10 Management Server administrator operates on a
registered machine on behalf of the Acronis Managed Machine Service (also known as the Acronis
service) on that machine and has the same privileges as the service has.
Alternatively, when creating a backup policy, the management server administrator has the option to
explicitly specify a user account under which the centralized backup plans will run on the registered
machines. In this case, the user account must exist on all the machines to which the centralized
policy will be deployed. This is not always efficient.
To be a management server administrator, the user must be a member of the Acronis Centralized
Admins group on the machine where the management server is installed.
2.12.7.7
Rights for Acronis services
The Acronis Backup & Recovery 10 Agent for Windows, Acronis Backup & Recovery 10 Management
Server, and Acronis Backup & Recovery 10 Storage Node components run as services. When installing
any of these components, you need to specify the account under which the component's service will
run.
For each service, you can either create a dedicated user account (recommended in most cases) or
specify an existing account of a local or domain user—for example: .
\LocalUser
or
DomainName\DomainUser
.
If you choose to create dedicated user accounts for the services, the setup program will create the
following user accounts:
For the Acronis Backup & Recovery 10 Agent for Windows service,
Acronis Agent User
For the Acronis Backup & Recovery 10 Management Server service,
AMS User
For the Acronis Backup & Recovery 10 Storage Node service,
ASN User
The newly created accounts are given the following privileges:
All three accounts are assigned the
Log on as a service
user right.
The Acronis Agent User user account is assigned the
Adjust memory quotas for a process
and
Replace a process level token
user rights.
The Acronis Agent User and ASN User user accounts are included in the
Backup Operators
group.
The AMS User user account is included in the
Acronis Centralized Admins
group.
The setup program will assign the above listed user rights to any existing account you specify for a
corresponding service.
