A member of the Backup Operators group can extract files and directories for which the user would normally not have access. Membership in this group permits users to open any file for backup purposes, however, once the file has been opened for read access it can be redirected by the Backup Operator to any location.
By default, users are allowed to backup and restore files for which they have the appropriate file and directory permissions without requiring membership in the Backup Operators group.
A type of local or global group that contains the user rights you need to back up and restore files and folders. Members of the Backup Operators group can back up and restore files and folders regardless of ownership, permissions, encryption, or auditing settings.
The Backup Operators group allows users to back up and restore files regardless of whether they have read or write access to the files. Since this group has a limited set of user rights, some functions are not available to members of the Backup Operators group.
The following summarizes the client operations which can and cannot be performed by a member of Backup Operators:
- Can back up and restore files
- Can back up system state.
- Can restore system state. (Windows® XP and 2003 only). On Windows Vista / 7 / 8 / 8.1 / 2008 / 10, you must be a member of the Administrators group to restore system state.
- Can start the TSM Scheduler service
- Cannot start any other services (TSM Client Acceptor, TSM Remote Client Agent, and TSM Journal Service)
- Cannot install and configure client services
- Cannot use open file support
- Cannot perform image backup and restore operations
- Cannot back up and restore Windows file shares
How to add a user to the Backup Operators group
- Open Computer Management
- In the console tree, click Groups. You can find it in Computer Management > Local Users and Groups > Groups
- In the details pane double-click Backup Operators.
- On the Backup Operators Properties dialog box, click Add.
- On the Select Users or Groups dialog box, next to Name, type the domain and user name of the person you want to make a backup operator Type the domain name first, then a backslash, then the user name. For example, \\London\William.
- Click Add, and then click OK.
To add a user to the Operators Group on a domain controller you must use Active Directory Users and Computers.
- You must be a member of the Administrators group to designate users as Backup Operators.
- To open Computer Management, click Start, and then click Control Panel. Click Performance and Maintenance, click Administrative Tools, and then double-click Computer Management.