I just sorted it out for CDOT.
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "cluster identity show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "lun show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "metrocluster show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "network interface show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "network port show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "version" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver export-policy rule show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver fcp interface show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver nfs status" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver peer show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot delete" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot modify" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot partial-restore-file" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot policy show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot rename" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot restore-file" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot restore" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone split start" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone split stop" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume destroy" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume qtree show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror delete" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror modify" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror list-destinations" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror get-volume-status" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror abort" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror break" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show-communication" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror promote" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror quiesce" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror release" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror restore" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror resume" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror resync" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror update" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "system license status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "system node show" -access readonly