Maintain control of your Microsoft 365 data
Post Reply
yusaku
Influencer
Posts: 22
Liked: never
Joined: Sep 16, 2020 6:46 am
Full Name: Yusaku Furuhashi
Contact:

Minimum permission requirement for integrating VBO instead of using global administrator.

Post by yusaku »

Hello team,

My customer doesn't accept providing a global administrator account to integrate VBO. However, the document below describes that a global administrator is required for adding organizations with modern app-only authentication and creating backup applications.
https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=50

Please tell me the minimum permissions for following tasks:
1.adding organizations with modern app-only authentication
2.creating backup applications

Regards,
Yusaku
Mike Resseler
Product Manager
Posts: 8191
Liked: 1322 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Minimum permission requirement for integrating VBO instead of using global administrator.

Post by Mike Resseler »

Yusaku,

These are the minimum requirements I'm afraid. You need that global administrator once only, and that i to create the app registration. Afterwards it is not used anymore
kmbundgaard
Veeam Software
Posts: 216
Liked: 21 times
Joined: May 01, 2017 11:15 am
Full Name: Karsten Bundgaard
Contact:

Re: Minimum permission requirement for integrating VBO instead of using global administrator.

Post by kmbundgaard »

Hi Yusaku,

I have the same issue with a customer but he accepted that we could use the global Admin role in a read-only state, then you have to create the Apps up front an use existing apps in the VBO console, that worked out for my customer, because he could remove the Global Admin role afterward.

-Karsten
yusaku
Influencer
Posts: 22
Liked: never
Joined: Sep 16, 2020 6:46 am
Full Name: Yusaku Furuhashi
Contact:

Re: Minimum permission requirement for integrating VBO instead of using global administrator.

Post by yusaku »

Hi Mike, Kumbundgaard,

Thank you for your help. Fortunately, my customer accepted to use global admin but they entered their global admin credential by themself. I didn’t know about the read-only state solution. So I will suggest that solution next time :)

Thanks,
Yusaku
Post Reply

Who is online

Users browsing this forum: Polina, Semrush [Bot] and 28 guests