-
- Veteran
- Posts: 942
- Liked: 53 times
- Joined: Nov 05, 2009 12:24 pm
- Location: Sydney, NSW
- Contact:
Service account with the least amount privilege for Office 365 backup best practice?
I'd like to know what is the best practice in creating the service account used by Veeam Agent for Office 365 v4 to backup Exchange Online, OneDrive, SharePoint and Teams?
Can I use Global Reader role: https://docs.microsoft.com/en-us/azure/ ... ermissions
Because assigning Global Admin role is too much of security exposure according to the IT security team.
Case #03905877
Can I use Global Reader role: https://docs.microsoft.com/en-us/azure/ ... ermissions
Because assigning Global Admin role is too much of security exposure according to the IT security team.
Case #03905877
--
/* Veeam software enthusiast user & supporter ! */
/* Veeam software enthusiast user & supporter ! */
-
- Product Manager
- Posts: 8191
- Liked: 1322 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: Service account with the least amount privilege for Office 365 backup best practice?
Hey Albertwt,
Those rights are not going to be enough. To be able to download data, restore data, and many other tasks (query CBT for example) you need more than reader permissions. In fact, even with the global reader role, you can't read any SharePoint site unless you are part of that site or site collection. So the term global might be a bit confusing
Those rights are not going to be enough. To be able to download data, restore data, and many other tasks (query CBT for example) you need more than reader permissions. In fact, even with the global reader role, you can't read any SharePoint site unless you are part of that site or site collection. So the term global might be a bit confusing
-
- Enthusiast
- Posts: 25
- Liked: never
- Joined: Jan 05, 2016 6:24 pm
- Full Name: Dusan Mataruga
- Contact:
Re: Service account with the least amount privilege for Office 365 backup best practice?
I am interested to know more about this too.
What privilege we need to assign to this service account and can we use MFA for this account?
What privilege we need to assign to this service account and can we use MFA for this account?
-
- Product Manager
- Posts: 8191
- Liked: 1322 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
- Contact:
Re: Service account with the least amount privilege for Office 365 backup best practice?
@DusanM
Yes, MFA is supported. It is explained in our guidelines and there is a blog and white paper also that works step-by-step in explaining it
Yes, MFA is supported. It is explained in our guidelines and there is a blog and white paper also that works step-by-step in explaining it
-
- Enthusiast
- Posts: 25
- Liked: never
- Joined: Jan 05, 2016 6:24 pm
- Full Name: Dusan Mataruga
- Contact:
Re: Service account with the least amount privilege for Office 365 backup best practice?
Thank you Mike.
By any chance, do you have link to the blog or white paper?
By any chance, do you have link to the blog or white paper?
-
- Veeam Software
- Posts: 2097
- Liked: 310 times
- Joined: Nov 17, 2015 2:38 am
- Full Name: Joe Marton
- Location: Chicago, IL
- Contact:
Who is online
Users browsing this forum: No registered users and 19 guests