Maintain control of your Microsoft 365 data
Post Reply
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

[Feature request] Account used to restore

Post by matteu »

Hello,

When I perform restore on VBO365 console, I can't see what Azure account is used to authenticate. It could be good to have this information instead of the local account on the restore log session in the console.
Maybe I misset it and it's available somewhere out of the VBO logs files ?
Mike Resseler
Product Manager
Posts: 8207
Liked: 1327 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: [Feature request] Account used to restore

Post by Mike Resseler »

@matteu
Can you clarify what you are exactly doing? Are you using the explorers? Because then you need to add the account to make sure you are the one with restore permissions. But we still need to log who performed the restore which is not an app registration but a user. Or am I misunderstanding it?
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

Re: [Feature request] Account used to restore

Post by matteu »

Hello,

For audit purpose, we need to know what account is authenticated to perform the restore. I don t find anywhere this information after the restore is done. I can see what is restore and when but not Who (azure account I mean).
Yes I talk about the explorer and not restore portal here (but maybe it s the same "issue" ? )

I don t find anywhere on history -> restore the azure account used to peform this opération. I will post a picture when I can.
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

Re: [Feature request] Account used to restore

Post by matteu »

This is what I can see when I restore data from console.
You can the initiatedby is not my azure account but local account.
I think I can see the Azure account only when I'm using the restore portal. It could be better if I can see it also when I use console to restore because I use an Azure account to authenticate before the restoration is performed. I hope you understand me.
Image
Mike Resseler
Product Manager
Posts: 8207
Liked: 1327 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: [Feature request] Account used to restore

Post by Mike Resseler »

I think I do, (but I still can be wrong here...)

From your screenshot:
* The information we give in the audit log is the person (in your example VEEAM)365\Administrateur) who is performing some operations. (In your example a restore of a single email I think)

But what I think you want is the data that you entered in the wizard (https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70)
Is that correct? That indeed is not something we have in the log (and to be honest, never has been requested... an interesting ask)


For the restore portal, it is different.
* You need to authenticate against the portal in the beginning
* We will see that user as the person who is doing XYZ for audit purposes
* In the backend, it is the application registration that you used in modern authentication that does the actual restore
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

Re: [Feature request] Account used to restore

Post by matteu »

Thanks for your answer.

If you use the console to restore an item, you need to authenticate. Veeam365\administrateur is the persone who launch the VBM365 console only.

When you use the console to restore like a mail, exchange explorer open, you select a mail and click restore, now you need to authenticate here : https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70

What I would like to see is the account we can see on the last picture 'administrator@qwbs.onmicrosoft.com' and not veeam365\administrateur
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

Re: [Feature request] Account used to restore

Post by matteu »

I just discover it's also possible to use application certificat authentication.

The issue I'm talking about is with Modern authentication + one time password
Mike Resseler
Product Manager
Posts: 8207
Liked: 1327 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: [Feature request] Account used to restore

Post by Mike Resseler » 1 person likes this post

Understood. This is not in place today. But I actually foresee that restores will move forward the way it is done in the restore portal as more and more restrictions are coming from MSFT around security, and in that case we won't need that one time password anymore (or can't use it anymore)
matteu
Veeam Legend
Posts: 824
Liked: 128 times
Joined: May 11, 2018 8:42 am
Contact:

Re: [Feature request] Account used to restore

Post by matteu »

I just read again your answer and I think you totally understand what I mean :)

I think my feature request is not so bad :)
Mike Resseler
Product Manager
Posts: 8207
Liked: 1327 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: [Feature request] Account used to restore

Post by Mike Resseler » 1 person likes this post

Nope, certainly not a bad feature request. It is the first one who asks it though ;-)
Post Reply

Who is online

Users browsing this forum: Semrush [Bot] and 25 guests