AvePoint Learn
Request article
Contact support
Request article
Contact support
English

    Home > Get Started > Enable Backup for Azure Virtual Machines, Azure Storage, Azure SQL, and VMware

    Export to PDF

    Enable Backup for Azure Virtual Machines, Azure Storage, Azure SQL, and VMware

    Before you enable the backup service for Azure VM, Azure Storage, Azure SQL, or VMware (Azure VMware), go to AvePoint Online Services to configure an app profile to register an app for Microsoft Delegate purposes. You can choose to register a delegated app or use a custom Azure app with the required Delegated permissions.

    After registering the app to your tenant, the owner of each subscription where the VMs or storages to protect are running must add the AvePoint Online Services - Delegated App or the custom app with Contributor role to the subscription.

    Note that if you have concerns about granting this app the Contributor role, you can create a custom role for this app. For details, refer to Add a Custom Role Using Azure Portal, CLI, or PowerShell.

    Complete the following steps:

    1. Go to Management > App Management in the AvePoint Online Services interface to create an app profile for Microsoft Delegate. For details, refer to Create an App Profile and Grant Consent.

    2. Add this app to all the subscriptions where the VMs, storages, or databases that you want to protect are running and grant this app the Contributor role. For details, refer to Add to Subscriptions and Assign the Contributor Role. This guide will only introduce the steps of adding a role to a subscription through the Microsoft Azure Portal.

      NOTE

      The user to add the app to the subscription and grant it the Contributor role must be the subscription owner or the User access administrator of your tenant, and if your tenant has new subscriptions to protect after the initialization, you must follow the same steps to add this app as Contributor as well.

      If you are going to protect Azure storage or use your own storage device to store the backup data, read the instructions in Allow AvePoint Agent Servers to Access Your Storage Account section carefully and complete the settings upon your need.

      If the storage account has disabled the "Allow storage account key access" feature, the app must also have the Storage Blob Data Contributor role to the subscription or storage account, in addition to the Contributor role. Additionally, in this case, only the Azure Blob Storage is supported; the Azure File Storage is not supported.

      If you want to protect databases with the Azure SQL backup service, read the instructions in Grant a SQL Server Admin Role

    3. After you have completed all the settings above, go to the Backup page of Cloud Backup for IaaS + PaaS, and then configure backup scopes for Azure Virtual Machine, Azure Storage, Azure SQL, or Azure VMware. Note that before you start creating a backup scope, you can click the Refresh button in the upper-right corner of the service page to retrieve the latest status for the data to protect. The Last refreshed time is displayed next to the Refresh button.

      For details on creating a backup scope, refer to