403 Forbidden at restoring to backed up org (other org working)

[ZachRo]

Hello together,

last week we have installed veeam office365 and adding 2 orgs. for tests we just backup in org a (sharepoint, exchange, users, teams).
org b was just created to test restore into other orgs.

but we have some troubles now with restoring into sharepoint of org a -> 403 forbidden.
i have recreated the azure app, compared it to org b but i cannot see any difference.
other restores (exchange f.e.) works fine.

so in summary:
- backups done in org a
- sharepoint backup into org b: works
- sharepoint backup into org a (where data is backuped from): not working (not with "restore to" or "restore to site").

the 403 forbidden prompts after doing device login and user login when i click verify.
server is running with updated windows server 2022 and veeam was updated today to V7 (was latest V6 before)

i have opened a support ticket, but was automatically closed (Case-Nr.05893684)

best regards
Roman Zach

[Mildur]

Hi Roman

For our community edition we only provide support on best effort. That's why the case was closed after 7 days.
If you are testing the software, you can use an evaluation license key to open a support case.

Before you try to create another support case as an evaluation user, please check if your permissions are as documented here:
https://helpcenter.veeam.com/docs/backu ... ml?ver=120

Best,
Fabian

[Polina]

@Roman

Is the account that you're using to verify a device code, granted with the Global Admin or SharePoint Admin permissions for the target organization?

[ZachRo]

@Polina

the accounts in both organizations are global admin.
i did the configuration of the organizations with this account too (and working in azure ad etc.).
the azure app is configured in both organization with certificate with the same api permissions.

[Polina]

Hi Roman,

Please make sure that the account you use to confirm the device code belongs to the organization where you're going to do restores.

[ZachRo]

Hi Polina,

yes i am sure that the account belongs the correct org

PS: i just removed both orgs, removed the azure app inside both tenants and reconfigured veeam with just the org which didnt work.
backup is doing well again but when i want to restore i get error

[Polina]

During SharePoint restores, we should automatically assign the Site Collection Administrator role to the account. Can you check if your account was added to the site collection admins for the site you were restoring?

Also, is your tenant a multi-geo organization?