Adding Microsoft Azure Accounts

In plugin, you can add Microsoft Azure connection accounts using one of the following ways:

• For Veeam Backup for Microsoft Azure version 7 or later — create accounts in Veeam Backup for Microsoft Azure web portal.
• For Veeam Backup for Microsoft Azure older than version 7 — create accounts in Veeam Service Provider Console plugin or connect an existing service account.

Prerequisites

Before you start adding Microsoft Azure accounts, consider requirements specified in the Plug-In Permissions section of the Veeam Backup for Microsoft Azure User Guide.

Creating Microsoft Azure Account

You can create Microsoft Azure connection accounts in Veeam Backup for Microsoft Azure web portal:

1. Log in to Veeam Service Provider Console.

For details, see Accessing Veeam Service Provider Console.

2. At the top right corner of the Veeam Service Provider Console window, click Configuration.
3. In the configuration menu on the left, click Plugin Library.
4. Click the Veeam Backup for Public Clouds plugin tile.
5. In the menu on the left, click Accounts and navigate to Public Cloud.
6. At the top of the list, click New > Microsoft Azure.
7. If you have multiple connected appliances, select the necessary appliance and click Create.

You will be redirected to Veeam Backup for Microsoft Azure web portal.

8. Create account in Veeam Backup for Microsoft Azure.

For details, see section Adding Service Accounts of the Veeam Backup for Microsoft Azure User Guide.

Creating Microsoft Azure Account in Veeam Service Provider Console

You can create new Microsoft Azure connection accounts in Veeam Service Provider Console plugin:

1. Log in to Veeam Service Provider Console.

For details, see Accessing Veeam Service Provider Console.

2. At the top right corner of the Veeam Service Provider Console window, click Configuration.
3. In the configuration menu on the left, click Plugin Library.
4. Click the Veeam Backup for Public Clouds plugin tile.
5. In the menu on the left, click Accounts and navigate to Public Cloud.
6. At the top of the list, click New > Microsoft Azure.

Veeam Service Provider Console will open the New Azure Account wizard.

7. At the Account Info step of the wizard, specify account settings:

• In the Appliance field, select Veeam Backup for Microsoft Azure appliance for which you want to create the account.
• In the Name field, specify account name.
• In the Description field, specify account description.

8. At the Account Type step of the wizard, select the Microsoft Azure environment where the account will reside and choose Create service account automatically.

9. At the Microsoft Azure step of the wizard, log in to your Microsoft Azure account:

1. Click Copy code to copy an authentication code.
2. Click the Microsoft authentication portal link.

A Microsoft Azure authentication window will open.

3. On the Microsoft Azure device authentication page, paste the code that you have copied and sign in to Microsoft Azure.

Make sure to sign in with the user account that has the User Access Administrator or the Owner role. For details on account roles, see Microsoft Docs.

4. Return to the wizard and click Next.

10. At the Summary step of the wizard, review the account settings and click Finish.

Adding Existing Microsoft Azure Account

You can connect an existing Microsoft Azure service account in Veeam Service Provider Console plugin:

1. Log in to Veeam Service Provider Console.

For details, see Accessing Veeam Service Provider Console.

2. At the top right corner of the Veeam Service Provider Console window, click Configuration.
3. In the configuration menu on the left, click Plugin Library.
4. Click the Veeam Backup for Public Clouds plugin tile.
5. In the menu on the left, click Accounts and navigate to Public Cloud.
6. At the top of the list, click New > Microsoft Azure.

Veeam Service Provider Console will open the New Azure Account wizard.

7. At the Account Info step of the wizard, specify account settings:

1. In the Appliance field, select Veeam Backup for Microsoft Azure appliance for which you want to create the account.
2. In the Name field, specify account name.
3. In the Description field, specify account description.

8. At the Account Type step of the wizard, select the Microsoft Azure environment where the account will reside and choose Specify existing service account.

9. At the Service Account step of the wizard, specify account credentials:

1. In the Application ID field, enter the application identifier. You can find the identifier in the application settings of your Azure Active Directory. For more information, see Microsoft Docs.

The specified Azure AD application must have either a custom role or the Contributor and Key Vault Crypto Officer Azure built-in roles assigned. If the AD application has a custom role assigned, make sure the role has the permissions required to perform backup and restore operations. For details on how to create Azure custom roles, see Microsoft Docs.

2. Choose authentication type for the account:

• To configure a password-based authentication, select the Client (application) secret option and provide the secret string. For details on obtaining the secret string, see Microsoft Docs.
• To configure a certificate-based authentication, select the Certificate option, upload the required security certificate and provide the certificate password.

3. In the Tenant ID field, enter a tenant ID of the Azure AD application.

You can find the tenant ID in the application settings of your Azure Active Directory. For details, see Microsoft Docs.

10. At the Summary step of the wizard, review the account settings and click Finish.