User`s guide

Example

Suppose that two users on a machine, UserA and UserB, perform backups from this machine to a

centralized vault managed by a storage node. On the storage node, let these users have regular (non-

administrative) accounts UserA_SN and UserB_SN, respectively.

Normally, UserA can access only the archives created by UserA (and owned by UserA_SN), and UserB

can access only the archives created by UserB (and owned by UserB_SN).

However, if UserA is a member of the Administrators group on the machine, this user can

additionally access the archives created from this machine by UserB—even though UserA's account

on the storage node is a regular one.

2.12.7.6 Management server administrator rights

Normally, the Acronis Backup & Recovery 10 Management Server administrator operates on a

registered machine on behalf of the Acronis Managed Machine Service (also known as the Acronis

service) on that machine and has the same privileges as the service has.

Alternatively, when creating a backup policy, the management server administrator has the option to

explicitly specify a user account under which the centralized backup plans will run on the registered

machines. In this case, the user account must exist on all the machines to which the centralized

policy will be deployed. This is not always efficient.

To be a management server administrator, the user must be a member of the Acronis Centralized

Admins group on the machine where the management server is installed.

2.12.7.7 Rights for Acronis services

The Acronis Backup & Recovery 10 Agent for Windows, Acronis Backup & Recovery 10 Management

Server, and Acronis Backup & Recovery 10 Storage Node components run as services. When installing

any of these components, you need to specify the account under which the component's service will

run.

For each service, you can either create a dedicated user account (recommended in most cases) or

specify an existing account of a local or domain user—for example: .\LocalUser or

DomainName\DomainUser.

If you choose to create dedicated user accounts for the services, the setup program will create the

following user accounts:

 For the Acronis Backup & Recovery 10 Agent for Windows service, Acronis Agent User

 For the Acronis Backup & Recovery 10 Management Server service, AMS User

 For the Acronis Backup & Recovery 10 Storage Node service, ASN User

The newly created accounts are given the following privileges:

 All three accounts are assigned the Log on as a service user right.

 The Acronis Agent User user account is assigned the Adjust memory quotas for a process and

Replace a process level token user rights.

 The Acronis Agent User and ASN User user accounts are included in the Backup Operators group.

 The AMS User user account is included in the Acronis Centralized Admins group.