-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
[Feature request] Account used to restore
Hello,
When I perform restore on VBO365 console, I can't see what Azure account is used to authenticate. It could be good to have this information instead of the local account on the restore log session in the console.
Maybe I misset it and it's available somewhere out of the VBO logs files ?
When I perform restore on VBO365 console, I can't see what Azure account is used to authenticate. It could be good to have this information instead of the local account on the restore log session in the console.
Maybe I misset it and it's available somewhere out of the VBO logs files ?
-
- Product Manager
- Posts: 8207
- Liked: 1327 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: [Feature request] Account used to restore
@matteu
Can you clarify what you are exactly doing? Are you using the explorers? Because then you need to add the account to make sure you are the one with restore permissions. But we still need to log who performed the restore which is not an app registration but a user. Or am I misunderstanding it?
Can you clarify what you are exactly doing? Are you using the explorers? Because then you need to add the account to make sure you are the one with restore permissions. But we still need to log who performed the restore which is not an app registration but a user. Or am I misunderstanding it?
-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
Re: [Feature request] Account used to restore
Hello,
For audit purpose, we need to know what account is authenticated to perform the restore. I don t find anywhere this information after the restore is done. I can see what is restore and when but not Who (azure account I mean).
Yes I talk about the explorer and not restore portal here (but maybe it s the same "issue" ? )
I don t find anywhere on history -> restore the azure account used to peform this opération. I will post a picture when I can.
For audit purpose, we need to know what account is authenticated to perform the restore. I don t find anywhere this information after the restore is done. I can see what is restore and when but not Who (azure account I mean).
Yes I talk about the explorer and not restore portal here (but maybe it s the same "issue" ? )
I don t find anywhere on history -> restore the azure account used to peform this opération. I will post a picture when I can.
-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
Re: [Feature request] Account used to restore
This is what I can see when I restore data from console.
You can the initiatedby is not my azure account but local account.
I think I can see the Azure account only when I'm using the restore portal. It could be better if I can see it also when I use console to restore because I use an Azure account to authenticate before the restoration is performed. I hope you understand me.

You can the initiatedby is not my azure account but local account.
I think I can see the Azure account only when I'm using the restore portal. It could be better if I can see it also when I use console to restore because I use an Azure account to authenticate before the restoration is performed. I hope you understand me.

-
- Product Manager
- Posts: 8207
- Liked: 1327 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: [Feature request] Account used to restore
I think I do, (but I still can be wrong here...)
From your screenshot:
* The information we give in the audit log is the person (in your example VEEAM)365\Administrateur) who is performing some operations. (In your example a restore of a single email I think)
But what I think you want is the data that you entered in the wizard (https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70)
Is that correct? That indeed is not something we have in the log (and to be honest, never has been requested... an interesting ask)
For the restore portal, it is different.
* You need to authenticate against the portal in the beginning
* We will see that user as the person who is doing XYZ for audit purposes
* In the backend, it is the application registration that you used in modern authentication that does the actual restore
From your screenshot:
* The information we give in the audit log is the person (in your example VEEAM)365\Administrateur) who is performing some operations. (In your example a restore of a single email I think)
But what I think you want is the data that you entered in the wizard (https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70)
Is that correct? That indeed is not something we have in the log (and to be honest, never has been requested... an interesting ask)
For the restore portal, it is different.
* You need to authenticate against the portal in the beginning
* We will see that user as the person who is doing XYZ for audit purposes
* In the backend, it is the application registration that you used in modern authentication that does the actual restore
-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
Re: [Feature request] Account used to restore
Thanks for your answer.
If you use the console to restore an item, you need to authenticate. Veeam365\administrateur is the persone who launch the VBM365 console only.
When you use the console to restore like a mail, exchange explorer open, you select a mail and click restore, now you need to authenticate here : https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70
What I would like to see is the account we can see on the last picture 'administrator@qwbs.onmicrosoft.com' and not veeam365\administrateur
If you use the console to restore an item, you need to authenticate. Veeam365\administrateur is the persone who launch the VBM365 console only.
When you use the console to restore like a mail, exchange explorer open, you select a mail and click restore, now you need to authenticate here : https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70
What I would like to see is the account we can see on the last picture 'administrator@qwbs.onmicrosoft.com' and not veeam365\administrateur
-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
Re: [Feature request] Account used to restore
I just discover it's also possible to use application certificat authentication.
The issue I'm talking about is with Modern authentication + one time password
The issue I'm talking about is with Modern authentication + one time password
-
- Product Manager
- Posts: 8207
- Liked: 1327 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: [Feature request] Account used to restore
Understood. This is not in place today. But I actually foresee that restores will move forward the way it is done in the restore portal as more and more restrictions are coming from MSFT around security, and in that case we won't need that one time password anymore (or can't use it anymore)
-
- Veeam Legend
- Posts: 824
- Liked: 128 times
- Joined: May 11, 2018 8:42 am
- Contact:
Re: [Feature request] Account used to restore
I just read again your answer and I think you totally understand what I mean 
I think my feature request is not so bad

I think my feature request is not so bad

-
- Product Manager
- Posts: 8207
- Liked: 1327 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: [Feature request] Account used to restore
Nope, certainly not a bad feature request. It is the first one who asks it though 

Who is online
Users browsing this forum: Semrush [Bot] and 25 guests