Confidentiality on O365 backup

[humayu]

We have sucessfully taken Backup of around 35 users with mailbox, Archives and One drive now our backup administrator can see complete details of the users including there mails.
we want confidentiality and restriction/security for our backup data that nobody can see the mails, onedrive and archives data.
please help us in this.

[Gostev]

Backup system administrator will always be able to access the data in backups, it is impossible to restrict them from this even in theory. This is Backup 101 and is true for any backup system or product.

[Mike Resseler]

@humayu

We do audit and log everything though. You will be able to see in the session log each action (including preview) that the administrator has done.

[humayu]

Hello,

Thankyou for your answers !
Can we restrict the backup administrator by any way so the backup administrator cannot see the data, as the data is very crucial for us and we do not want this.

[Mike Resseler]

@humayu Not at this moment, but it is on our roadmap

[humayu]

is this possible that we can apply 2FA or MFA for this ?

[Mike Resseler]

No, we are using the logon for the server, not the logon for MSFT

[Mike Resseler]

@humayu

I need to clarify something because we might be confusing terms (just as I was with Gostev). The person who has local admin rights to the VBO server will always be able to view/ read/ do whatever they want to on the data. A local admin can touch data of whatever outside of the solution. What I meant with the roadmap, is basically the ability to allow certain users. (For example, a group of helpdesk operators) to perform restores on a certain part of data. But obviously, that does mean they won't have access to the windows server where VBO is installed. I hope this clarifies it a bit, and I apologize for the confusion caused by me.