Checking Service Account Permissions

For each service account, you can check whether the account has all the permissions required to access Azure resources that you want to protect:

1. Switch to the Configuration page.
2. Navigate to Accounts > Service Accounts.
3. Select the service account and click Check Permissions.

If any of the permission checks fail, use either of the following options:

• If you have selected the Create service account automatically option at the Type step of the Add Account wizard, click Grant and then do the following:

1. In the Logon to Microsoft Azure window, click Copy Code to Clipboard and then click https://microsoft.com/devicelogin.
2. On the Microsoft Azure device authentication page, do the following:

1. Paste the code that you have copied and click Next.
2. Select a Microsoft Azure account that will be used to access the Azure CLI. The account must be assigned either the User Access Administrator or the Owner role.

3. Back to the Logon to Microsoft Azure window, check whether any errors occurred during the authentication process and click OK.

• If you have selected the Specify existing service account option at the Type step of the Add Account wizard, do the following:

1. Click Export Permissions. Veeam Backup for Microsoft Azure will save the .JSON file with the full list of all required permissions to the default download directory on the local machine. For more information on the required permissions, see Service Account Permissions.
2. Use the downloaded file to create a custom role in Microsoft Azure as described in Microsoft Docs.
3. Assign the created role to the Microsoft Entra application associated with the new service account as described in Microsoft Docs.

To make sure that the missing permissions have been successfully granted, click Recheck.