Required vSphere Roles & Privileges for the Hystax VMware Replication Agent

VMware vSphere permissions required to install the Hystax external replication agent

Hystax VMware Replication Agent requires the following user permissions in vSphere (Role “VMware Consolidated Backup user” in vCenter):
  1. Datastore - Browse
  2. Datastore - FileManagement
  3. Virtual machine - Configuration -- Disc Lease
  4. Virtual machine - Interact -- Power On
  5. Virtual machine - Interact -- Power Off
  6. Virtual machine - Provisioning -- Allow read-only disk access
  7. Virtual machine - Provisioning -- Allow virtual machine files upload
  8. Virtual machine - Provisioning -- Allow virtual machine download
  9. Virtual machine - Snapshot management -- Create snapshot
  10. Virtual machine - Snapshot management -- Remove Snapshot

Also, permission to access CBT is necessary for the correct work of the replication. To enable CBT:
  1. Virtual machine - Configuration – Disk change tracking

Additionally, it is recommended to include the following global permissions:
  1. Global - Disable methods
  2. Global - Enable methods
  3. Global - Licenses

Ports for the correct work of the agent:
  1. DR host - tcp/80, tcp/443
  2. vSphere host - tcp/443
  3. ESXi host(s) - tcp/udp/902
  4. Send logs to the Acura cluster - udp/12201