This is an archive version of the document. To get the most up-to-date information, see the current version.

Adding Microsoft Azure Accounts

To restore machines to Microsoft Azure, you must add a Microsoft Azure account to Veeam Backup & Replication. When you add a Microsoft Azure account, Veeam Backup & Replication imports information about subscriptions and resources associated with the Microsoft Azure account. During the restore process, Veeam Backup & Replication accesses these resources and uses them to register new VMs in Microsoft Azure.

If necessary, you can add different user accounts to Veeam Backup & Replication. In this case, Veeam Backup & Replication will import information about all subscriptions and resources associated with provided accounts, and you will be able to use these resources for restore.

Information about subscriptions and resources is saved to the Veeam Backup & Replication configuration database. You can re-import this information at any time.

Before You Begin

Before you add a Microsoft Azure account to Veeam Backup & Replication, check the following prerequisites:

Make sure that you have a user account in Microsoft Azure. You will not be able to create a new user account when passing through the Initial Configuration wizard.
[For Microsoft Server OS] The Protected Mode must be switched off in the Internet Explorer settings. Otherwise, you will not be able to log on to Microsoft Azure when passing through the Initial Configuration wizard.

If you do not want to switch off the Protected Mode for security reasons, you can add the following sites to the list of trusted hosts in Internet Options > Secure settings in Internet Explorer or in Control Panel > Network and Internet:

You may need to additionally disable the Internet Explorer Enhanced Security Configuration in Server Manager.

On the backup server, you must set the correct time according to the timezone where the backup server is located. Otherwise, you may not be able to add a Microsoft Azure user account to Veeam Backup & Replication.

We recommend having Microsoft Azure PowerShell version 5.1.1 installed on the machine running the Veeam Backup & Replication console. If the version is different from 5.1.1 you may not be able to add a Microsoft Azure account to Veeam Backup & Replication.

If you do not have Microsoft Azure PowerShell on the machine, Veeam Backup & Replication will prompt you to install it. For more information, see the Deployment Type step of the Initial Configuration wizard.

When the Internet access is possible only through HTTP/HTTPS proxy, you must configure the proxy settings for the Local System account or account under which the Veeam Backup Service is running. For more information, see this Microsoft article.

Adding Microsoft Azure Accounts Note:

When you add a Microsoft Azure account to Veeam Backup & Replication, Veeam Backup & Replication creates an Azure AD application in the added account. For more information, see Microsoft Azure documentation.

Procedure

To add a Microsoft Azure account using the Resource Manager deployment model, do the following:

From the main menu, select Manage Cloud Credentials.
In the Manage Cloud Credentials window, click Add and select Microsoft Azure compute account.

At the Initial Configuration step of the wizard, click Next.

At the Deployment Type step of the wizard, select Microsoft Azure.

From the Region list, select a Microsoft Azure region: Global, Germany, China or Government, and click Next.

At the Subscription step of the wizard, select the method of importing your Azure Resource Manager subscription. You have two options:

Use the existing account: Select this option, if you want to use Azure Active Directory Account.

The Azure account must have the Owner role privileges for the required subscription. If the Owner role cannot be used, you can create a custom role with minimal permissions. To learn how to create a custom role, see Creating Custom Role for Azure Account.

Note the following:

Only subscriptions that belong to selected account's directory will be added.
In this scenario, you cannot add an account with enabled MFA. You must disable MFA for the required account. App passwords are not supported.

Important

If you have more than one Azure Active Directory tenant associated with your account, you will need to specify which tenant to use. For information how to do it, see this KB article.

Create a new account: If you select this option, Veeam Backup & Replication will register a special application on Azure. Veeam Backup & Replication will use this application to communicate with Azure. Mind the following prerequisites:

A Microsoft Azure account that you plan to add to Veeam Backup & Replication must have the Owner role privileges for the subscription that will be used for restore to Microsoft Azure. Owner role privileges are required to provide access to subscription for the created application. For details, see Microsoft Azure documentation.
The user must have privileges to register applications: Global Administrator privileges or the enabled Users can register applications option in Azure portal. For details, see Microsoft Azure documentation.

To create a new account, do the following:

Click the Configure account link.

Veeam Backup & Replication will check if Microsoft Azure PowerShell is installed on the machine that runs the Veeam Backup & Replication console. If Microsoft Azure PowerShell is not installed, Veeam Backup & Replication will display a warning.

In the warning window, click this link. Veeam Backup & Replication will launch the Microsoft Azure Powershell installation wizard. Follow steps of the installation wizard to set up the Microsoft Azure PowerShell 5.1.1 on the machine.

After the installation process is complete, close the Veeam Backup & Replication console. In some cases, Microsoft PowerShell Azure requires you to restart the machine.

Open the Veeam Backup & Replication console and pass through the Initial Configuration wizard once again.

Click the Configure account link. You will be prompted to log in to the Microsoft Azure portal. Enter credentials of an existing Microsoft Azure account in the browser window. Veeam Backup & Replication will retrieve information about subscriptions and resources associated with this account.

If you plan to restore Linux machines to Microsoft Azure, select the Enable restore of Linux-based computers check box. Veeam Backup & Replication will deploy a helper appliance in Microsoft Azure and use it for restore of Linux machines. For more information about helper appliance setup, see Configuring Helper Appliances.

At the Summary step of the wizard, review details of configured settings and click Finish to close the wizard.