Veeam Enterprise Manager is the designated component for delegating restore capabilities to specific users or groups, such as database administrators (DBAs). By assigning the "Restore Operator" role to the DBA group within Enterprise Manager and scoping this role to the specific Microsoft SQL Server database objects, the corporation can enable self-service restores for DBAs. This approach grants them the necessary permissions to restore their databases through the web-based interface without providing access to the main Veeam Backup & Replication console or other restore operations, thereby adhering to the principle of least privilege.

A. Denying access is a restrictive action. It does not grant the necessary permissions for the DBAs to perform their required tasks.

B. The Restore Operator role on the main backup server provides broad permissions to restore any workload, not just SQL databases, violating the principle of least privilege.

D. This option describes the desired outcome (delegation) but does not specify the correct Veeam mechanism or role required to implement it.

1. Veeam Backup Enterprise Manager Guide V12

"Security

" section "Managing Roles and Users." This section details the predefined security roles

including the "Restore Operator." It states

"Users with this role can perform restore operations with Veeam Backup Enterprise Manager. When you assign this role

you can specify the scope of objects that the user will be able to restore." This confirms that the role can be scoped to specific items.

2. Veeam Backup Enterprise Manager Guide V12

"Restoring Microsoft SQL Server Databases

" section "Required Permissions." This section explicitly states

"To restore Microsoft SQL Server databases

you must have the Portal Administrator or Restore Operator role." This directly links the required task to the specific role in Enterprise Manager.