Set-VBREntraIDTenant

Short Description

Modifies a Microsoft Entra ID tenant added to the backup infrastructure.

Product Edition: Standard, Enterprise, Enterprise Plus, Veeam Universal License

Syntax

This cmdlet provides the following parameter sets:

SecretKey (Default)

Set-VBREntraIDTenant -Tenant <VBREntraIDTenant> [-Description <String>] [-ApplicationId <String>]

[-SecretKey <SecureString>] [-CacheRepository <CBackupRepository>]

[-ProtectedScope <VBREntraIDTenantProtectedScope[]>] [<CommonParameters>]

Certificate

Set-VBREntraIDTenant -Tenant <VBREntraIDTenant> [-Description <String>] [-ApplicationId <String>]

[-CertificatePath <String>] [-Password <SecureString>] [-CacheRepository <CBackupRepository>]

[-ProtectedScope <VBREntraIDTenantProtectedScope[]>] [<CommonParameters>]

Detailed Description

This cmdlet modifies an Entra ID tenant added to the backup infrastructure.

Parameters

Parameters
Parameter	Description	Type	Required	Position	Accept Pipeline Input
ApplicationId	Specifies the ID of an application. The cmdlet will use this application to access Entra ID resources.	`String`	False	Named	False
CacheRepository	Specifies a cache repository. The cmdlet will use this repository to store temporary cache files for log processing. Accepts the `CBackupRepository` object. To get this object, run the `Get-VBRBackupRepository` cmdlet.	`CBackupRepository`	False	Named	False
CertificatePath	For the certificate-based authentication. Specifies the path to the certificate. The cmdlet will use this certificate to authenticate to Entra ID.	`String`	False	Named	False
Description	Specifies the description for the tenant that you want to add.	`String`	False	Named	False
Password	For the certificate-based authentication. Specifies the password that the cmdlet will use to authenticate to Entra ID.	`SecureString`	False	Named	False
ProtectedScope	Specifies the tenant protection scope. Note: If you do not specify this parameter, the following tenant resources will be protected by default: Users Groups Roles Administrative units Applications Accepts the `VBREntraIDTenantProtectedScope` object. To get this object, run the `New-VBREntraIDTenantProtectedScope` cmdlet.	`VBREntraIDTenantProtectedScope[]`	False	Named	False
SecretKey	For the password-based authentication. Specifies an application secret. The cmdlet will use this secret to authenticate to Entra ID.	`SecureString`	False	Named	False
Tenant	Specifies the Entra ID tenant that you want to change. Accepts the `VBREntraIDTenant` object. To get this object, run the `Get-VBREntraIDTenant` cmdlet.	`VBREntraIDTenant`	True	Named	False

<CommonParameters>

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see Microsoft Docs.

Output Object

The cmdlet returns the VBREntraIdTenant object that contains settings of the added tenant.

Examples

Modifying Entra ID Tenant

This example shows how to modify an Entra ID tenant and change the authentication method for the certificate-based authentication.

$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"

$psswd = Read-Host -Prompt "Enter password" -AsSecureString

$cacheRepo = Get-VBRBackupRepository -Name "Default Backup Repository"

$scope = New-VBREntraIDTenantProtectedScope -ResourceType Users, Groups, AdminUnits, ConditionalAccessPolicies

Set-VBREntraIdTenant -Tenant $tenant -ApplicationId $appId -CertificatePath "C:\Users\Administrator\Locked\certificate-3518.pfx" -Password $psswd -CacheRepository $cacheRepo -ProtectedScope $scope

Perform the following steps:

Run the Get-VBREntraIdTenant cmdlet. Specify the AzureTenantId parameter value. Save the result to the $tenant variable.
Create the $psswd variable. Use the Read-Host cmdlet to get the password and convert it to a secure string.
Run the Get-VBRBackupRepository cmdlet. Specify the Name parameter value. Save the result to the $cacheRepo variable.
Run the New-VBREntraIDTenantProtectedScope cmdlet. Specify the ResourceType parameter value. Save the result to the $scope variable.
Run the Set-VBREntraIdTenant cmdlet. Specify the following settings:
- Set the $tenant variable as the Tenant parameter value.
- Set the $appId variable as the ApplicationId parameter value.
- Specify the CertificatePath parameter value.
- Set the $psswd variable as the Password parameter value.
- Set the $cacheRepo variable as the CacheRepository parameter value.
- Set the $scope variable as the ProtectedScope parameter value.