Step 6. Check Account Permissions

At the Permissions Check step of the wizard, you can check whether the service account has all the permissions required to access Azure resources that you want to protect. For more information on the required permissions, see Service Account Permissions.

In case any of the permission checks fail, use either of the following options:

• If the service account has been created automatically, click Grant. If you have already logged in to Azure portal at step 3 or step 4 of the wizard, Veeam Backup for Microsoft Azure will automatically grant the missing permissions to the Microsoft Entra application with which the service account is associated. If you have not logged in to Azure portal, do the following:

1. In the Logon to Microsoft Azure window, click Copy Code to Clipboard and then click https://microsoft.com/devicelogin.
2. On the Microsoft Azure device authentication page, do the following:

1. Paste the code that you have copied and click Next.
2. Select a Microsoft Azure account that will be used to access the Azure CLI. The account must be assigned either the User Access Administrator or the Owner role.

3. Back to the Logon to Microsoft Azure window, check whether any errors occurred during the authentication process and click OK.

• If the service account has been created using an existing Microsoft Entra application, do the following:

1. Click Export. Veeam Backup for Microsoft Azure will save the .JSON file with the full list of all required permissions to the default download directory on the local machine.
2. Use the downloaded file to create a custom role in Microsoft Azure as described in Microsoft Docs.
3. Assign the created role to the Microsoft Entra application with which the service account is associated, as described in Microsoft Docs.

To make sure that the missing permissions have been successfully granted, click Recheck.