Yesterday, I had the chance to stand up a VMware Data Protection (VDP) appliance virtual machine. This is the replacement for VDR in vSphere 5.0 and upwards and is based on the EMC Avamar product.
When configuring the VDP appliance for the first time using the https://hostname:9543/vdp-configure URL, you are asked for credentials to connect to vCenter. The interface tells you that this is used to register with vCenter, but what it doesn’t tell you is that this account is actually then used for on-going access to vCenter and creating and deleting the snapshots on the VMs it is backing up. Therefore, make sure you use a service account and not your own account.
There is also a requirement for this account to be directly permissioned in vCenter and not via a nested group membership, so make sure you do this before attempting the registration.