Performing Database Level Backups and Restores › Backup Agent Service Account Requirements for Database Level Backup and Restore

Backup Agent Service Account Requirements for Database Level Backup and Restore

To perform database level backup and restore jobs, your backup agent service account must meet the following criteria on the Exchange Server:

It must be:

• A domain account.
• A member of the Administrator group.
• A member of the Backup Operators group.
• (Exchange Server 2003 systems) Assigned the Exchange Full Administrator role.
• (Exchange Server 2007 systems) Assigned either the Exchange Organization Administrator Role, or the Exchange Server Administrator Role.
• (Exchange Server 2010/2013 systems) Assigned the Exchange Organization Management Role.

Notes:

For Exchange Server 2007

The service account needs to be assigned to Exchange View-Only Administrators when you do not use the following options:

• Allow databases of destination storage group to be overwritten
• Dismount database before restore
• Create Recovery Storage Group automatically

For Exchange Server 2010/2013

The service account needs to be assigned only to the Exchange View-Only Organization Management role when you do not use the following options:

• Allow databases to be overwritten
• Dismount databases before restore
• Create Recovery Database automatically

If the database level backup service account has View-Only Organization Management role privileges, the following property is not available: the list of servers that have a copy of the database. This property is available when Exchange Organization Management Role privileges are used.

If you use the client agent with local account privileges to back up an Exchange Server 2010 mailbox folder, the database files and transaction log files are included in the backup job. These files are excluded only when backed up with a domain account with at least Exchange View-Only Organization Management privileges.