You need the VBR Console to do this as VEM has no facility as you noted.  You could install the VBR Console on a system to give them access and add users to specific roles for Tape Operator.  They can then just connect to the VBR server and eject tapes then remove them.

https://helpcenter.veeam.com/docs/backup/vsphere/configuring_users.html?ver=120

They don't need to log onto the Veeam server. They can install the console on their own workstations and connect to the Veeam server though that.

Thanks. The users are already define as Tape Operators only. I know I can install the console on their workstations; I don’t want to. We want to move to a separation of privileges model, meaning that any “privileged” activity (i.e., touching any domain infrastructure) can only be done from certain workstations, and then only by using certain logins. It’s just that I haven’t had time to make their new VMs/workstations, nor teach them how that changes their daily activities. Hence why they were trying to log directly onto the server, since they had no other other to the VB&R Console otherwise (for now).

With those restrictions in place, the direct answer to your question is no, you cannot export tapes using Enterprise Manager.

However, with Veeam v13 moving to a Linux Appliance and a web based UI, perhaps tape management tasks could be performed from there and that might fit your needs.

That’s what I thought. OK, thanks.