Before you Begin

Before you add a Microsoft Azure storage account with Microsoft Entra ID authorization to Veeam Backup & Replication, check the following prerequisites:

  • If you plan to use a new Microsoft Entra application to access storage account (at the Account Type step), consider the following:
  • Make sure that you already have a user account in Microsoft Entra ID. This account must have privileges listed in the Permissions section.
  • If you have multiple tenants associated with the Microsoft Entra ID user account that you plan to use to create a new application, Veeam Backup & Replication will create the application in the home tenant of the account. As a result, the application will have access only to the subscriptions of the home tenant, as well as the Azure Compute account will. If you want to use another tenant and its subscriptions, follow the instructions in this Veeam KB article.
  • The created Entra ID application is assigned with the following roles for a storage account which name was entered at the Name step of the wizard:
  • Storage Account Contributor
  • Storage Blob Data Contributor
  • Storage Blob Data Owner

For more information on roles, see Microsoft Azure Docs.

You can limit the subscriptions to which Veeam Backup & Replication assigns the privileges as described in this Veeam KB article.

  • If you plan to use an existing Entra ID application to access storage account (at the Account Type step), consider the following:
  • Create an Entra ID application beforehand. For more information on how to create it, see Microsoft Docs. Note that you do not need to configure redirect URI.
  • The Entra ID application must have several role privileges assigned on a storage account. For more information, see Permissions.
  • Only storage accounts from subscriptions that belong to the applications tenant can be used.
  • On the backup server, you must set the correct time according to the timezone where the backup server is located. Otherwise, you may not be able to add a Microsoft Entra ID user account to Veeam Backup & Replication.
  • When the internet access is possible only through HTTP/HTTPS proxy, you must configure the proxy settings for the Local System account or account under which the Veeam Backup Service is running. For more information, see this Microsoft article.

Page updated 2/23/2024

Page content applies to build