RBAC role details

Last published : Apr 02, 2026
The following table provides details about the different RBAC roles and the operations that you can perform for each role:

Table: Default RBAC roles

Role Operations
Administrator An administrator can perform all operations within Backup Exec.
Operations that only an administrator can perform:
- Manage RBAC users in Backup Exec.
- Modify media server level settings (Backup Exec settings).
- Manage licenses.
- Manage logon accounts.
- Manage email text notifications.
- Manage recipients.
- Manage alerts.
- Add and remove servers.
- Add and remove M365 servers.
- Install Backup Exec agents on guest virtual machines.
- Delete job history.
- Export data encryption key.
- Manage anomalies.
- Manage reports.
Storage Administrator Operations that a storage administrator can perform\:
- View Backup Exec settings. Storage administrator must contact administrator to make changes to the settings.
- Manage all types of storage.
- Manage the jobs that related to storage, such as inventory and catalog.
- Perform the Run now operation on any job, put any job on hold or change priority of the job.
- Respond to alerts.
- Manage reports.
Backup Administrator Operations that a backup administrator can perform\:
- Manage job defaults.
- View Backup Exec settings. Backup administrator must contact the administrator to make changes to the settings.
- Manage backup, verify jobs, and so on except restore and utility jobs. Administrator adds the server, creates the logon account, then storage administrator sets up storage devices, and the backup administrator can create backup jobs.
- Perform the Run now operation on any job, put any job on hold or change priority of the job.
- View a list of anomalies.
- Respond to alerts.
- Manage reports.
Restore Administrator Operations that a restore administrator can perform\:
- View Backup Exec settings. Restore administrator must contact the administrator to make changes to the settings.
- Manage restore jobs and malware scan". Administrator adds the server, creates the logon account, storage administrator runs inventory and catalog if required, and restore administrator can create restore jobs
- Perform the Run now operation on any job, put any job on hold or change priority of the job.
- Respond to alerts.
- Manage reports.
View Only Operations that a user with view only role can perform\:
- View all running and scheduled jobs.
- View job history.
- View alerts.
- Run the standard reports, run a custom report that is configured, and view the reports that are generated using a scheduled job.