Adding Microsoft 365 Tenants

To start protecting the Microsoft 365 tenant data, add the Microsoft 365 tenant to Veeam Data Cloud.

Before you start adding the tenant, check Considerations and Limitations.

To add a Microsoft 365 tenant, do the following:

1. Launch the Add Microsoft 365 Tenant wizard:

1. To open the list of Microsoft 365 tenants, click Microsoft 365 on the left.
2. Click Add Tenant.
3. On the Add Microsoft 365 Tenant page, from the Subscription drop-down list, select a subscription of the customer for which you want to create a tenant.

If the necessary subscription is not in the list, request a new subscription in VCSP Pulse. For details, see Requesting Subscriptions.

4. Select Direct Onboarding.
5. Click Next. Veeam Data Cloud will launch the Add Microsoft 365 Tenant wizard.

2. Choose how you want to connect Veeam Data Cloud to the Microsoft tenancy:

• Auto Connection. Select this option if you want to automatically connect Veeam Data Cloud to the Microsoft tenancy. This option is recommended and selected by default. Follow the Automatic Connection Steps instructions to proceed.
• Manual Connection. Select this option if you want to manually connect  Veeam Data Cloud to the Microsoft tenancy. Follow the Manual Connection Steps instructions to proceed.

Automatic Connection Steps

If you choose to automatically connect Veeam Data Cloud to the Microsoft 365 tenant of your customer (recommended), do the following:

1. In the Choose the type of Flex connection section, select Auto Connection.
2. If you also have a subscription to the Premium license plan and want to connect Microsoft Backup Storage to Veeam Data Cloud, select the Include Express Connection check box. To skip the Express connection, do not select the check box.
3. Click Sign in with Microsoft.

4. In the Microsoft authentication window, select the Microsoft account under which you want to authenticate against Microsoft 365. The account must have the Microsoft 365 Global Admin permissions.
5. Accept the required permissions.
6. Return to Veeam Data Cloud. If the connection is successful, Veeam Data Cloud displays the following message: Connected. We have successfully established a connection with account Microsoft 365 Global Admin.
7. Specify the tenant settings:

1. In the Tenant Name field, specify a name for the new tenant.
2. From the Storage Region drop-down list, select a Microsoft Azure region where the backup infrastructure and storage will be provisioned.

For information on supported Microsoft Azure regions, see Backup Storage Regions.

3. In the Select the service you want to protect section, make sure to select only the services that are available in the Microsoft 365 tenant that you are connecting to.
4. In the Backup policy type section, select one of the following options:

• Auto-create policies. This option is recommended and enables automatic backup policies for all users, sites and teams.

In Retention Period, set the number of Years or Days for the retention period of your backups, or select Unlimited to keep the backups for an indefinite time.

Once you set the retention period, you cannot reduce it. For more information, see Backup Retention.

• Manually create policies. This option allows you to manually set your backup policies after onboarding.

8. Click Create Tenant.

Manual Connection Steps

If you choose to manually connect Veeam Data Cloud to the Microsoft 365 tenant of your customer, do the following:

1. In Microsoft Entra ID, do the following:

1. Create a new App Registration.
2. Assign the required permissions to the new application registration.
3. Create and assign a certificate to the application.

X.509 compatible certificates from a trusted CA (Certificate Authority) and self-signed certificates are supported. For more information, see this Microsoft article.

4. Export the certificate to a PFX file. You will use this file at step 4-c of this procedure.
5. On the overview page of the application, copy the Application (client) ID value.

2. In Veeam Data Cloud for Microsoft 365, in the Choose the type of Flex connection section, select Manual Connection.
3. Specify the following:

1. In the Admin Email field, type the email address of a Microsoft 365 user account that belongs to your Microsoft 365 tenant.
2. In the App Registration id field, type the Application (client) ID value that you copied during the application registration in Microsoft Entra ID.
3. In the Certificate field, click Browse and select the PFX certificate file that you exported from Microsoft Entra ID.
4. In the Password field, only type the password if you have exported the certificate with password protection enabled.

4. Click Connect. If the connection is successful, Veeam Data Cloud displays the following message: Connected. We have successfully established a connection with account Microsoft 365 account.
5. Specify the tenant settings:

1. In the Tenant Name field, specify a name for the new tenant.
2. From the Storage Region drop-down list, select a Microsoft Azure region where the backup infrastructure and storage will be provisioned.

For information on supported Microsoft Azure regions, see Backup Storage Regions.

3. In the Select the service you want to protect section, make sure to select only the services that are available in the Microsoft 365 tenant that you are connecting to.
4. In the Backup policy type section, select one of the following options:

• Auto-create policies. This option is recommended and enables automatic backup policies for all users, sites and teams.

In Retention Period, set the number of Years or Days for the retention period of your backups, or select Unlimited to keep the backups for an indefinite time.

Once you set the retention period, you cannot reduce it. For more information, see Backup Retention.

• Manually create policies. This option allows you to manually set your backup policies after onboarding.

6. Click Create Tenant.