Security Configuration

It is optional but recommended to create a separate backup user. In the next step we will connect our PBS to Proxmox VE, and for that you need a user. You could simply use the root user, but best practices dictate that a separate user is better for security reasons. Also, Add Two Factor Authentication to secure your root account.

Note: a user that has Two Factor Authentication, can't be used to connect your PBS to Proxmox VE. That is also why we created a separate backup user in the previous step.

Adding Backup User

1. Login to PBS
2. Under Configuration go to Access Control and click Add
3. In new user window
   1. Give it a name
   2. Realm: Proxmox Backup authenticator
   3. Choose strong password
   4. Make sure Enabled is checked and it doesn't expire

1. Now that the account has been created, we also need to give it the correct permissions.
2. Go the Permissions tab
3. Click Add and select User Permission

1. In User Premission Window
   1. Path: select datastore only
   2. User: choose backup user you created
   3. Role: Choose DatastoreAdmin
   4. Make sure Propagate is selected
2. Click Add

Enabling Two Factor Authentication

1. Go to Access Control
2. Select Two Factor Authentication and click Add
3. Select TOTP and Fill the required details using your preferred password manager

You have to do this for each user