This is an archive version of the document. To get the most up-to-date information, see the current version.Microsoft SharePoint and OneDrive for Business
This section lists required permissions to work with Microsoft SharePoint and OneDrive for Business organizations. The section lists permissions required by Veeam Backup for Microsoft Office 365 when you add organizations using modern authentication with legacy authentication protocols or basic authentication.
Consider the following:
- To add Microsoft SharePoint Online organizations, make sure that the LegacyAuthProtocolsEnabled setting is enabled.
To enable this setting, use the following cmdlet.
Set-SPOTenant -LegacyAuthProtocolsEnabled $True |
For more information about the Set-SPOTenant cmdlet, see this Microsoft article.
- The account you are using to add on-premises Microsoft SharePoint and Microsoft SharePoint Online organizations must be a member of these organizations.
On-Premises Microsoft SharePoint
The following table lists required roles that must be assigned to the account that you want to use to add on-premises Microsoft SharePoint organizations.
Role | Description | Misc. |
|---|---|---|
Site Collection Administrator | Required to back up Microsoft SharePoint Sites. | The account must be a member of the Farm Administrator group. |
Microsoft SharePoint Online
The following table lists required roles that must be assigned to the account that you want to use to add Microsoft SharePoint Online organizations.
Role | Description | Misc. |
|---|---|---|
SharePoint Administrator | Required to back up Microsoft SharePoint Sites. | You can assign the Global Administrator role that overrides these roles. |
View-only Configuration | Required to get a list of available groups and users. | |
View-Only Recipients |
Assigning SharePoint Service Administrator role in PowerShell
To assign the SharePoint Service Administrator role using PowerShell (for Microsoft SharePoint Online organizations), use the following code snippet.
Connect-MsolService $role=Get-MsolRole -RoleName "SharePoint Service Administrator" $accountname=example@domain.com Add-MsolRoleMember -RoleMemberEmailAddress $accountname -RoleName $role.Name |
The $accountname variable must be a user UPN (example@domain.com).
The MSOL module can be downloaded from this Microsoft page.