SPO backup user permission

[shafeeq]

Hi Team,

Following error has occurred while trying to add a new organization to VBO selecting only Sharepoint and ondrive backup. Authentication selected is modern with legacy auth enabled.
:: Check Required cmdlets access: Failed to execute cmdlet: Get-OrganizationConfig.
:: Check View-Only Recipients role: Failed to execute cmdlet: Get-ManagementRoleAssignment.

Backup user has Sharepoint admin role and AAD application have API permissions as described in the help doc.
https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=40

I could not find the View-only Configuration and View-Only Recipients roles in the role assignment tab. Could you please help me to sort it out

[Polina]

Hi shafeeq,

You can assign them directly with PowerShell.

Check out this white paper for the examples.

[shafeeq]

Hi Polina, Thanks for the quick response.
But I wonder why that role is required for sharepoint backup! That is certainly a Exchange cmdlet.

[Polina]

Even if you're backing up only SharePoint or OneDrive, VBO still needs, for example, access to the list of users and groups in the organization, which is not possible when using only SharePoint admin role.

[shafeeq]

Thanks, understood!