Teams restore error 403 Forbidden

[karsten123]

Hi,

we have an issue with teams restore, that we never had before.

Case 04925058

We get an error in the Teams Explorer: Failed to get license for the user. Ensure user has a valid Office365 license assigned to them.

Everything is set up as it has to be.
Authentication is modern only.
The restore for Exchange Online, OneDrive and Sharepoint works without problems.

Do you know such a problem?
I think it is a problem in the Office 365 tenant and i can‘t get my head around this.

tia
Karsten

[Mildur]

You need to make sure, that you habe met this requirements. It looks like your user doesn‘t have a teams enabled license.

https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=50

Restore Using Modern App-Only Authentication Method

The user account must have a Microsoft Office 365 license that permits access to Microsoft Teams API. The minimum sufficient license is Microsoft Teams Exploratory experience.

To restore Microsoft Teams data, the user account must have the Teams Administrator role.
Make sure that the required settings are specified for the Azure AD application used for restore. For more information, see Configuring Azure AD Application Settings.

If you restore data with Azure AD applications using a certificate, make sure that your Azure AD application is granted the required permissions. For more information, see Permissions for Modern App-Only Authentication.

[karsten123]

Hi Fabian,

thank you for your thoughts.

The restore user has the Teams Exploratory license attached.

I don‘t know.

[Mike Resseler]

Hi Karsten,

I might be wrong, but that type of license is probably not valid anymore? (However, I never worked with such a license so I can be wrong). Please check if it is still valid, if not, please create a support call and let us know the case ID

Thanks
Mike

[karsten123]

Hi Mike,

thank you. I mentioned the case ID in the first post.

In the process of troubleshooting we also apply a M365 business standard. Same error.
Brand new, cloud only Global Admin. Same error.
New Azure Enterprise Application with new certificate. Same error.
Backup and restore on a known working VBO setup in our own cloud. Same error

I am currious to know, how to troubleshoot this type of error on the M365 side.
The Teams Explorer log is not that chatty

Unfortunately, we do not maintain the M365 tenant environment and i think, the customer had implemented some sort of restriction for security reasons.

Thanks

[karsten123]

I think it works now. I will verify on monday and update the story.
Sneak peak: it is license related

[Mildur]

Nice,
Please do that. Would be nice to know, why it doesn‘t have worked.

[karsten123]

Well. The solution for this environment was a organization settings.
M365 admin center: Settings: Settings for organization: Services: Microsoft Teams.
The option for activating „Other“ licenses for Teams was disabled.
Successfull restore was confirmed.

[karsten123]

Strange things are happening.
Do not know what has changed, but Teams restore is not working again.
403 Access denied.
If the authenticating user is member of the team, restore is successfull.
Modern authentication should add a temporary owner for restore. Or did i get it wrong?
But this does not happen.

I do not know how to figure it out at all.

[Polina]

Hi Karsten,

What build are you running? and did you open a new case on this issue?

[karsten123]

Hi Polina,

the customer is running 5.0.3.1033.
I did not open a new case yet. But i will.

[Polina]

Please open a case to get a fix from support. QA team confirmed that it's a known issue and the hotfix for version 5d has been recently delivered to support.

[karsten123]

Hi Polina,

thank you very much. Case is created: 05074344

I will report back.

[karsten123]

Teams restore is working again.

The provided fix from Veeam support solves the problem.

Thx Veeam, Polina and Daria