Backup Application Permissions

The following table lists required permissions for Azure AD applications that you add as backup applications.

Note

Using multiple applications may impact the performance of your production SharePoint environment. This functionality will be deprecated in future versions of Veeam Backup for Microsoft 365.

All listed permissions are of the Application type and required for data backup.

API

Permission name

Exchange Online

SharePoint Online and OneDrive for Business

Microsoft Teams

Description

Microsoft Graph

Sites.Read.All

 

 

Getting download URLs for files and their versions.

Note: In the Microsoft Azure China region, the Sites.ReadWrite.All permission is used instead.

SharePoint

Sites.FullControl.All

Reading SharePoint sites and OneDrive accounts content.

User.Read.All

Reading OneDrive accounts (getting site IDs).