Organization Object Types

Veeam Backup for Microsoft 365 allows you to specify object types and their processing and exclusion options when creating and configuring backup jobs.

The following object types are available for backup and restore:

• Organizations

Consists of organization objects and their processing options.

• Groups

Consists of Microsoft 365 groups (available only in Microsoft 365 organizations), security groups, distribution groups and dynamic distribution groups.

• Users

Consists of shared mailboxes, public mailboxes and users.

• Sites

Consists of Microsoft SharePoint sites and subsites.

• Teams

Consists of Microsoft Teams teams.

Each of these object types (except for the Sites and Teams1 types) consists of a set of processing/exclusion options such as Mail, Archive, OneDrive, Site, Group Mail and Group Site which you can select/clear to make data retrieval even more precise.

Processing and exclusion options can be selected at the Select Objects to Back Up and Select Objects to Exclude steps of the New Backup Job wizard.

1If you did not enable usage of Teams Export APIs for team chats backup.

Organizations

The following table lists processing/exclusion options available for Organization type:

1If you enabled usage of Teams Export APIs for team chats backup.

Groups

The following table lists available Group types and their processing/exclusion options:

Users

The following table lists available User types and their processing/exclusion options:

Sites

Consider the following:

• Objects of the Site type do not have any processing/exclusion options.
• Objects of this type are not available in on-premises Microsoft SharePoint organizations.
• You can select either the root site, or any of its subsites.

In the following example, you can select either the root Development site which automatically selects all of its subsites, or you can select, for example, Builds and Releases. In the latter case, the root Development site will not be selected.

Teams

Consider the following:

• Objects of this type are available in Microsoft 365 organizations only.
• When you add an object of this type to a backup job, Veeam Backup for Microsoft 365 backs up the following objects:

• Team chats.

To back up team chats, Veeam Backup for Microsoft 365 does one of the following:

• Backs up the TeamChat and TeamsMessagesData folders of the group mailbox that belongs to the Microsoft 365 group associated with the backed-up team. This is the default scenario for team chats backup in Veeam Backup for Microsoft 365.
• Uses Teams Export APIs. You can use Teams Export APIs for team chats backup only for Microsoft 365 organizations with modern app-only authentication. To proceed to this scenario, you must set up Veeam Backup for Microsoft 365 to use Teams Export APIs for team chats backup. For more information, see Backup of Team Chats Using Teams Export APIs.

• Document library of the SharePoint team site.

• Team metadata, for example, settings of the team, information about team members, channels, tabs, applications.

• You can edit processing options for the Team type objects only if you enable usage of Teams Export APIs for team chats backup. For more information, see Getting Started with Teams Export APIs.

The following table lists processing options available for objects of the Team type:

1If you enabled usage of Teams Export APIs for team chats backup.

Backup of Team Chats Using Teams Export APIs

Starting from version 6a (build 6.1.0.222), Veeam Backup for Microsoft 365 can back up Microsoft Teams messages using Microsoft Teams APIs in Microsoft Graph (Teams Export APIs). This method substitutes backup of the TeamsMessagesData folder that will be deprecated by Microsoft.

Teams Export APIs allow Veeam Backup for Microsoft 365 to access sensitive data of team chats, including channel messages. As a result, Veeam Backup for Microsoft 365 can back up such objects.

Because Teams Export APIs provide access to sensitive data, they are considered protected APIs. This is a reason that before starting to use Teams Export APIs in Veeam Backup for Microsoft 365, you must pass additional validation and grant permissions. For more information, see Getting Started with Teams Export APIs.

Consider the following:

• Microsoft applies an additional cost for using Microsoft Teams APIs in Microsoft Graph. Veeam Backup for Microsoft 365 API requests will be qualified as Model B.
• Backup of team chats using the Teams Export APIs is only supported for Microsoft 365 organizations with modern app-only authentication.
• Backup of team chats using Teams Export APIs is not supported for Microsoft organizations in the Microsoft Azure China, Germany, US Government GCC and US Government GCC High regions.

For more information about Teams Export APIs, see this Microsoft article.

Getting Started with Teams Export APIs

To set up Veeam Backup for Microsoft 365 to use Teams Export APIs for team chats backup, do the following:

1. In Microsoft Forms, fill out the request form required by Microsoft.

Mind that processing your request to access Teams Export APIs may take up to 2 weeks. For more information on how to fill out the request form, see this Veeam KB article.

2. Enable usage of Teams Export APIs for team chats backup. Do the following:

1. Run the Set-VBOServer cmdlet.
2. Run the Set-VBOProxy cmdlet with the EnableTeamsGraphAPIBackup parameter.

For more information, see this Veeam KB article.

3. In the Add Organization or Edit Organization wizard, select the Teams chats check box when adding a new Microsoft 365 organization with modern app-only authentication or editing an existing one. If you do not select this check box, Veeam Backup for Microsoft 365 will not back up team chats.
4. Do one of the following to enable access for an existing Azure AD application to all Teams public channel messages:

• In the Add Organization or Edit Organization wizard, allow Veeam Backup for Microsoft 365 to grant automatically the ChannelMessage.Read.All Microsoft Graph API permission to an existing Azure AD application when adding a new Microsoft 365 organization with modern app-only authentication or editing an existing one. For more information, see Adding Organizations with Modern App-Only Authentication.
• In the Microsoft Azure portal, grant manually the ChannelMessage.Read.All Microsoft Graph API permission to this Azure AD application. For more information, see Permissions for Modern App-Only Authentication.

For more information on how to set up Veeam Backup for Microsoft 365 to use Teams Export APIs, see this Veeam KB article.