#Enable Backup for SQL Server

Cloud Backup for IaaS + PaaS supports the CAP Gateway mode to backup SQL Server database (including Microsoft SQL Server in Azure VM and Self-managed SQL Server).

In the SQL Server service, Self-managed SQL Server refers to SQL Servers that you install, configure, maintain, and operate yourself, whether they are deployed in the cloud or on premises.

• Self-managed SQL Server on cloud - The SQL Servers running on virtual machines in cloud platforms such as Azure, AWS, or GCP. While the cloud provider manages the underlying infrastructure, you are responsible for managing the SQL Servers yourself.

• Self-Managed SQL Server on premises - The SQL Servers installed and operated on local virtual machines in your on-premises environment.

Before you enable the backup service for SQL Server (including Microsoft SQL Server in Azure VM and Self-managed SQL Server), go to AvePoint Online Services to configure an app profile to register an app for Microsoft Delegate purposes. You can choose to register a delegated app or use a custom Azure app with the required Delegated permissions.

After registering the app to your tenant, the owner of each subscription where the SQL Server databases to protect are running must add the AvePoint Online Services - Delegated App or the custom app with Contributor role to the subscription.

Note that if you have concerns about granting this app the Contributor role, you can create a custom role for this app. For details, refer to Add a Custom Role Using Azure Portal, CLI, or PowerShell.

Complete the following steps:

1. Go to Management > App Management in the AvePoint Online Services interface to create an app profile for Microsoft Delegate. For details, refer to Create an App Profile and Grant Consent.

2. Add this app to all the subscriptions where the SQL Server databases that you want to protect are running and grant this app the Contributor role. For details, refer to Add to Subscriptions and Assign the Contributor Role. This guide will only introduce the steps of adding a role to a subscription through the Microsoft Azure Portal.

   NOTE

   The user must add the app to the subscription and grant it the Contributor role must be the subscription owner or the User access administrator of your tenant, and if your tenant has new subscriptions to protect after the initialization, you must follow the same steps to add this app as Contributor as well.

3. Enable authentication for your SQL Server.

   • For Microsoft SQL Server in Azure VM, refer to Enable Microsoft Entra ID Authentication.

   • For self-managed SQL Server, refer to Enable SQL Server Authentication.

4. After the service account is ready, go to the Backup page of the Cloud Backup for IaaS + PaaS to configure the backup scope for the SQL Server (including Microsoft SQL Server in Azure VM and Self-managed SQL Server).

5. For details on configuring the backup scope, refer to Create a New Backup Scope for SQL Server .