Maintain control of your Microsoft 365 data
Post Reply
albertwt
Veeam Legend
Posts: 879
Liked: 46 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Service account with the least amount privilege for Office 365 backup best practice?

Post by albertwt »

I'd like to know what is the best practice in creating the service account used by Veeam Agent for Office 365 v4 to backup Exchange Online, OneDrive, SharePoint and Teams?

Can I use Global Reader role: https://docs.microsoft.com/en-us/azure/ ... ermissions

Because assigning Global Admin role is too much of security exposure according to the IT security team.

Case #03905877
--
/* Veeam software enthusiast user & supporter ! */
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Service account with the least amount privilege for Office 365 backup best practice?

Post by Mike Resseler »

Hey Albertwt,

Those rights are not going to be enough. To be able to download data, restore data, and many other tasks (query CBT for example) you need more than reader permissions. In fact, even with the global reader role, you can't read any SharePoint site unless you are part of that site or site collection. So the term global might be a bit confusing :-)
DusanM
Enthusiast
Posts: 25
Liked: never
Joined: Jan 05, 2016 6:24 pm
Full Name: Dusan Mataruga
Contact:

Re: Service account with the least amount privilege for Office 365 backup best practice?

Post by DusanM »

I am interested to know more about this too.
What privilege we need to assign to this service account and can we use MFA for this account?
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Service account with the least amount privilege for Office 365 backup best practice?

Post by Mike Resseler »

@DusanM
Yes, MFA is supported. It is explained in our guidelines and there is a blog and white paper also that works step-by-step in explaining it
DusanM
Enthusiast
Posts: 25
Liked: never
Joined: Jan 05, 2016 6:24 pm
Full Name: Dusan Mataruga
Contact:

Re: Service account with the least amount privilege for Office 365 backup best practice?

Post by DusanM »

Thank you Mike.

By any chance, do you have link to the blog or white paper?
jmmarton
Veeam Software
Posts: 2092
Liked: 309 times
Joined: Nov 17, 2015 2:38 am
Full Name: Joe Marton
Location: Chicago, IL
Contact:

Re: Service account with the least amount privilege for Office 365 backup best practice?

Post by jmmarton »

Post Reply

Who is online

Users browsing this forum: No registered users and 12 guests