M365 account requirements to add an Organization

[Brad-Translucent]

I am having trouble trying to work out what level of permissions the M365 account needs to be able to add an organization. Does it have to be a global admin account? I am having trouble trying to work it out from the documentation.
Thanks,
Brad.

[Mildur]

Hi Brad

Global administrator is only required if you let Veeam Backup for Microsoft 365 automatically create the application.

If you don't like to use a global administrator in VB365, you can create the application yourself in EntraID and assign the permissions yourself. Don't forget to create a certificate which VB365 will use to authenticate against the application. The permission you need to configure in EntraID are listed here here: https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70

When adding the M365 organization, choose "Use an existing Azure AD application" and on the next step deselect "Grant this application required permissions and register its certificate in AzureAD". In the same step provide the ID from the EntraID application and certificate for the authentication.
And you need to provide a mail address from an existing user. It can be any account in your M365 tenant and doesn't require any admin role.
There is one thing to note if you want to protect public folders. The provided account must have Owner permissions on public folder and a valid Exchange Online license with an active Exchange Online Mailbox.

Best,
Fabian

[Brad-Translucent]

Hi Fabian,

Thanks for the information. Off I go to give it a shot.

Cheers,
Brad.