Before you Begin

Before you add a Microsoft Azure storage account with Microsoft Entra authorization to Veeam Backup & Replication, check the following prerequisites:

If you plan to use a new Microsoft Entra application to access storage account (at the Account Type step), consider the following:

Make sure that you already have a user account in Microsoft Entra ID. This account must have privileges listed in the Permissions section.

If you have multiple tenants associated with the Microsoft Entra user account that you plan to use to create a new application, Veeam Backup & Replication will create the application in the home tenant of the account. As a result, the application will have access only to the subscriptions of the home tenant, as well as the Azure Compute account will. If you want to use another tenant and its subscriptions, follow the instructions in this Veeam KB article.

The created Microsoft Entra application is assigned with the following roles for a storage account which name was entered at the Name step of the wizard:

For more information on roles, see Microsoft Azure Docs.

You can limit the subscriptions to which Veeam Backup & Replication assigns the privileges as described in this Veeam KB article.

If you plan to use an existing Microsoft Entra application to access storage account (at the Account Type step), consider the following:

Create an Microsoft Entra application beforehand. For more information on how to create it, see Microsoft Docs. Note that you do not need to configure redirect URI.
The Microsoft Entra application must have several role privileges assigned on a storage account. For more information, see Permissions.
Only storage accounts from subscriptions that belong to the applications tenant can be used.

On the backup server, you must set the correct time according to the timezone where the backup server is located. Otherwise, you may not be able to add a Microsoft Entra user account to Veeam Backup & Replication.

When the internet access is possible only through HTTP/HTTPS proxy, you must configure the proxy settings for the Local System account or account under which the Veeam Backup Service is running. For more information, see this Microsoft article.