PVE Server backup to PBS, minimum api permissions

[BastianR]

Hello everyone,

I would like to secure my Proxmox backup a little further and give the Proxmox server as few permissions as possible on the Proxmox backup server.

Can someone tell me what the minimum API permissions are to backup from PVE to the PBS, and e.g. to perform a restore, but not to delete backups?
I would prefer to do the retention on the PBS itself.

Many thanks &
have a nice weekend
Bastian

 

[BastianR]

Looks like I found the answer: https://forum.proxmox.com/threads/what-are-the-needed-permissions-for-pbs-integration-in-pve.77968/

 

[sb-jw]

That's how we set it up. But we also use the namespaces and wanted to keep everything strictly separate, even the clusters/servers should all have individual access tokens.

 

[BastianR]

Thank you, I will do it the same way!