An application-aware backup contains metadata of VSS-aware applications that are present on the disk. To access this metadata, the agent needs an account with the appropriate rights, which are listed below. You are prompted to specify this account when enabling application backup.
The account must be a member of the Backup Operators or Administrators group on the machine, and a member of the sysadmin role on each of the instances that you are going to back up.
Exchange 2007: The account must be a member of the Administrators group on the machine, and a member of the Exchange Organization Administrators role group.
Exchange 2010 and later: The account must be a member of the Administrators group on the machine, and a member of the Organization Management role group.
The account must be a domain administrator.
Additional requirement for virtual machines
If the application runs on a virtual machine that is backed up by Agent for VMware or Agent for Hyper-V, ensure that User Account Control (UAC) is disabled on the machine. If you do not want to disable UAC, you must provide the credentials of a built-in domain administrator (DOMAIN\Administrator) when enabling application backup.