This is an archive version of the document. To get the most up-to-date information, see the current version.

Configuration

Restore Portal is deployed automatically along with the Veeam Backup for Microsoft 365 REST API component installation.

The Veeam Backup for Microsoft 365 administrator can configure Restore Portal for the following backup infrastructures:

Single Microsoft 365 Organization
Multiple Tenants on Service Provider Side

Configuring Restore Portal for Single Microsoft 365 Organization

If the Veeam Backup for Microsoft 365 administrator wants to allow end users and restore operators in a Microsoft 365 organization to explore and restore data from backups using Restore Portal, the following actions must be performed before users start using the web application:

Check that the Veeam Backup for Microsoft 365 REST API component is installed either on the Veeam Backup for Microsoft 365 server or on a separate machine.

Installing REST API separately from a Veeam Backup for Microsoft 365 server allows you to decrease the load on infrastructure when exploring and restoring data from backups using the Restore Portal. For more information, see Installing Veeam Backup for Microsoft 365 and Veeam Explorers to deploy the solution to the Veeam Backup for Microsoft 365 server and Installing REST API on Separate Machine to deploy the Veeam Backup for Microsoft 365 REST API component separately.

Enable the Veeam Backup for Microsoft 365 RESTful API Service.

This service processes REST API commands and allows Restore Portal to communicate with Veeam Backup for Microsoft 365. For more information, see REST API Settings if you have deployed the solution on the Veeam Backup for Microsoft 365 server and Configuring REST API and Restore Portal on Separate Machine if you have installed REST API separately.

Enable restore operator authentication to the Veeam Backup for Microsoft 365 server. For more information, see Authentication Settings.
Enable Restore Portal and configure access to it. For more information, see Restore Portal Settings if you have deployed the solution on the Veeam Backup for Microsoft 365 server and Configuring REST API and Restore Portal on Separate Machine if you have installed REST API separately.
Add restore operator roles to assign permissions to users who act as restore operators. For more information, see Adding Restore Operator Role.
Provide end users and restore operators with the Restore Portal web address.

Configuring Restore Portal for Multiple Tenants

Note

Follow these steps as a part of Backup as a Service for Microsoft 365 usage scenario. For more information, see Backup as Service for Microsoft 365.

On Service Provider Side

To configure access for end users and restore operators from tenant organizations to Restore Portal, the following actions must be performed on a service provider side before users start using the web application:

Check that the Veeam Backup for Microsoft 365 REST API component is installed either on the Veeam Backup for Microsoft 365 server or on a separate machine.

Enable the Veeam Backup for Microsoft 365 RESTful API Service.

Enable tenant and restore operator authentication to the Veeam Backup for Microsoft 365 server. For more information, see Authentication Settings.
Enable Restore Portal and configure access to it. For more information, see Restore Portal Settings if you have deployed the solution on the Veeam Backup for Microsoft 365 server and Configuring REST API and Restore Portal on Separate Machine if you have installed REST API separately.

Important

Azure AD application that end users and restore operators from tenant organizations will use to access Restore Portal must be created for a Microsoft 365 organization on a service provider side.

Run the Install-Module cmdlet to install the Azure Active Directory PowerShell for Graph module. For more information, see this Microsoft article.
Share the configured Azure AD application with all tenant organizations.

To do this, run the New-AzureADServicePrincipal cmdlet. Specify an application ID of Azure AD application configured for authentication to Restore Portal as the AppId parameter value.

$Credential = Get-Credential

Connect-AzureAD -Credential $Credential

New-AzureADServicePrincipal -AppId "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"

Configure access to Restore Portal on each tenant side. For more information, see On Tenant Side.
Add restore operator roles to assign permissions to users who act as restore operators. For more information, see Adding Restore Operator Role.
Provide end users and restore operators with the Restore Portal web address.

On Tenant Side

Perform the following actions for all tenant organizations before users start using the web application:

Run the Install-Module cmdlet to install the Azure Active Directory PowerShell for Graph module. For more information, see this Microsoft article.
Run the New-AzureADServicePrincipal cmdlet. Specify an application ID of Azure AD application configured by a service provider for authentication to Restore Portal as the AppId parameter value.

$Credential = Get-Credential

Connect-AzureAD -Credential $Credential

New-AzureADServicePrincipal -AppId "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"

Sign in to the tenant organization Azure portal.
Go to Azure Active Directory > Enterprise applications.
Search for Azure AD application configured for authentication to Restore Portal by ObjectID that you have obtained at step 2. Alternatively, you can get ObjectID by running the following command:

Get-AzureADServicePrincipal -Filter "AppId eq 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'"

Specify an application ID of Azure AD application configured by a service provider for authentication to Restore Portal as the AppId parameter value.

Go to the application permissions and grant admin consent to this application on behalf of all users in the tenant organization. For more information, see this Microsoft article, Permissions for Authentication to Restore Portal and contact Veeam Customer Support.

In This Section