What You Do After Upgrade

After you upgraded Veeam Backup for Microsoft 365 to version 8, it is recommended to do the following:

• For Microsoft 365 organizations that you may have in the Veeam Backup for Microsoft 365 console from previous installations of the product:

• Switch organizations that use basic authentication and modern authentication with legacy protocols allowed to modern app-only authentication.
• Configure backup of public folder and discovery search mailboxes for organizations with modern app-only authentication.
• Configure backup and restore of Microsoft Teams private and shared channels for organizations with modern app-only authentication.

• Upgrade the Veeam Backup for Microsoft 365 REST API component on a separate machine.
• Upgrade backup proxy servers and backup repositories.
• Manually remove a directory that stores object storage cache created in previous installations of Veeam Backup for Microsoft 365.

Switching Organizations to Modern App-Only Authentication

You can continue to use Veeam Backup for Microsoft 365 version 8 to backup and restore data of Microsoft 365 organizations that were added to previous installations of the product using basic authentication or modern authentication with legacy protocols allowed. Since Microsoft deprecated basic authentication and legacy authentication protocols, it is recommended to change the authentication method to modern app-only authentication for such organizations. For more information, see this Microsoft article.

To change authentication method, do the following:

1. Edit your Microsoft 365 organization that uses legacy authentication methods. For more information, see Editing Organization Settings.
2. Select the Modern authentication option to use Microsoft Entra application to connect to your Microsoft 365 organization. For more information, see Select Microsoft Entra Region and Authentication Method.

Configuring Backup of Public Folder and Discovery Search Mailboxes

You can allow Veeam Backup for Microsoft 365 to backup public folder and discovery search mailboxes and determine correctly object type for shared mailboxes in Microsoft 365 organizations with modern app-only authentication that were added to previous installations of the product. This functionality requires a Microsoft Entra application to be granted the Exchange.ManageAsApp permission and the Global Reader role.

To update permissions of the Microsoft Entra application, do the following:

1. Edit your Microsoft 365 organization with modern app-only authentication. For more information, see Editing Organization Settings.
2. Select the Use an existing Azure AD application option.
3. Clear and then select again the Grant this application required permissions and register its certificate in Azure AD check box to automatically update permissions of the existing Microsoft Entra application. For more information, see Using Existing Microsoft Entra Application.

Alternatively, you can sign in to Microsoft Identity platform and manually grant this Microsoft Entra application the Exchange.ManageAsApp permission and the Global Reader role. For more information, see Permissions for Backup and Granting Global Reader Role to Microsoft Entra Application.

Configuring Backup and Restore of Microsoft Teams Private and Shared Channels

You can allow Veeam Backup for Microsoft 365 to backup and restore Microsoft Teams private and shared channels in Microsoft 365 organizations with modern app-only authentication that were added to previous installations of the product. This functionality requires a Microsoft Entra application to be granted the ChannelMember.ReadWrite.All and Files.ReadWrite.All permissions of the Application type.

To update permissions of the Microsoft Entra application, do the following:

1. Edit your Microsoft 365 organization with modern app-only authentication. For more information, see Editing Organization Settings.
2. Select the Use an existing Azure AD application option.
3. Clear and then select again the Grant this application required permissions and register its certificate in Azure AD check box to automatically update permissions of the existing Microsoft Entra application. For more information, see Using Existing Microsoft Entra Application.

Alternatively, you can sign in to Microsoft Identity platform and manually grant this Microsoft Entra application the required permissions. For more information, see Permissions for Modern App-Only Authentication.

Upgrading REST API on Separate Machine

If you use a separate machine with REST API for communicating with Restore Portal, you must manually upgrade the Veeam Backup for Microsoft 365 REST API component on this machine. For more information, see Upgrading REST API on Separate Machine.

Upgrading Backup Infrastructure Components

Once Veeam Backup for Microsoft 365 is upgraded, the following entities will be marked as Out of Date:

• Backup repositories

For information on how to upgrade backup repositories, see Upgrading Backup Repositories.

• Backup proxy servers

For information on how to upgrade backup proxy servers, see Upgrading Backup Proxy Servers

Consider that a default backup proxy server will be upgraded automatically.

Removing Local Cache Directory

You have created this directory in previous installations of Veeam Backup for Microsoft 365 to store object storage cache that contains backup metadata. During upgrade to version 8, Veeam Backup for Microsoft 365 copies existing metadata to the PersistentCache database created by Veeam Backup for Microsoft 365 on the PostgreSQL instance. For more information, see Cache.

You can manually remove this directory because Veeam Backup for Microsoft 365 does not use it anymore.