VMware Live Site Recovery supports the automatic protection of virtual machines in array-based protection groups and Virtual Volumes protection groups.

Array-Based Replication Automatic Protection

When you create a new virtual machine or use vMotion to move a virtual machine on a datastore that is replicated and protected in VMware Live Site Recovery, the virtual machine is automatically added to and protected in an existing protection group.

Virtual Volumes Automatic Protection

VMware Live Site Recovery applies automatic protection to new or existing virtual machines for which the SPBM policy is changed to a Virtual Volumes policy for replication and to a replication group protected with VMware Live Site Recovery.

Multi-Tenancy Considerations and Configuration

Protecting virtual machines and virtual machine templates is a cross-site operation. During this operation, the VMware Live Site Recovery servers on both sites perform permission checks for the local user that is logged in. For automatic protection each VMware Live Site Recovery site uses a pre-configured local vCenter Server account to perform the permission checks with. By default VMware Live Site Recovery uses its local service account as automatic protection user. The local service account is SRM-<srm-server-uuid>. The user can be changed with an advanced setting to another vCenter Server account. This vCenter Server account cannot be a user group or a user with global vCenter Server administrator privileges.

For successful protection, the vCenter Server account that you use for automatic protection must have the following privileges.
  • VcDr.ProtectionProfile.com.vmware.vcDr.Edit privilege in the permission assigned in the VMware Live Site Recovery inventory on the protection group where the virtual machine will be added.
  • VirtualMachine.Replication.com.vmware.vcDr.Protect privilege in the permission assigned on the production virtual machine or the virtual machine template in the vCenter Server inventory.
When assigning permissions to the automatic protection user or the user groups that the automatic protection user is a member of, the administrators can choose SrmAdministrator or SrmProtectionGroupsAdministrator roles.

For multiple VMware Live Site Recovery deployments on a single vCenter Server, the administrators must configure different automatic protection accounts per VMware Live Site Recovery instance and assign appropriate permissions that split the vCenter Server inventory to simulate a multi-tenant environment.

You can modify how VMware Live Site Recovery handles the automatic protection of virtual machines. See, Change the Automatic Protection Settings. The required privilege to edit those settings is VcDr.Protection.com.vmware.vcDr.AutoProtection.Edit part of the SrmAdministrator role.