---
title: "Specifying Existing Microsoft Entra Application"
description: "If you selected the Specify existing AAD Application option at the Account Info step of the wizard, Veeam Data Cloud for Microsoft Azure will connect to an existing Microsoft Entra application that grants access to your Azure resources."
canonical: "https://helpcenter.veeam.com/docs/vdcazure/userguide/settings_add_account_existing_app.html"
breadcrumb: "User Guide > Configuring General Settings > Configuring Backup Settings > Managing Azure Accounts > Managing Service Accounts > Creating Service Accounts > Step 3. Specify Connection Type > Specifying Existing Microsoft Entra Application"
dateModified: "2026-11-06"
---

# Specifying Existing Microsoft Entra Application

If you selected the **Specify existing AAD Application** option at the [Account Info](settings_add_azure_account_info.md) step of the wizard, Veeam Data Cloud for Microsoft Azure will connect to an existing [Microsoft Entra application](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added) that grants access to your Azure resources. For Veeam Data Cloud for Microsoft Azure to be able to connect to the Microsoft Entra application and to protect Azure resources, the application must be created in Microsoft Azure, and have the *Contributor*, *Key Vault Crypto User* and *Storage Queue Data Contributor* [Azure built-in roles](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles) assigned. To learn how to create Microsoft Entra applications and assign Azure roles, see [Microsoft Identity Platform](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-an-azure-active-directory-application) and [Azure RBAC documentation](https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current).

::: tip

If you want the service account to have granular permissions, you can [create a custom role](https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal) in Microsoft Azure, [assign the role](https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current) to the Microsoft Entra application instead of the built-in roles, and make sure the role has all the permissions required to perform backup and restore operations. For the list of required permissions, see [Service Account Permissions](permissions.md). 

:::

At the **Specify Azure Application** step of the wizard, specify an existing service account that grants access to your Azure resources:

1. In the **Tenant ID** field, enter the tenant ID of the specified Microsoft Entra application. 

   You can find the tenant ID on the **Overview** page of your Microsoft Entra application in the Microsoft Azure portal. For more information, see [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#get-values-for-signing-in).

2. In the **Application ID** field, enter the application identifier. You can find the identifier on the **Overview** page of your Microsoft Entra application in the Microsoft Azure portal. For more information, see [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#get-values-for-signing-in).
3. In the **Client Secret** field, enter the value of the secret. To learn how to create client secrets, see [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret). 
4. In the **Select subscriptions** field, select the subscriptions to which you want to have access. You must select at least one subscription.

   ::: note

   You can add multiple subscriptions to an Azure service account. However, a subscription can only be associated with a single service account. If a subscription has been previously added to another account, you will not be able to add such subscription to the account you are creating.

   :::

5. Click **Connect & Save**.

[![](images/settings_azure_accounts_add_type_old.png)](images/settings_azure_accounts_add_type_old.png){.toggle scale=60}