Merge pull request #276275 from AbhishekMallick-MS/May-24-2024-Entra

Entra for offline data backup

Author: prmerger-automator[bot]

articles/backup/backup-azure-backup-import-export.md

@@ -3,7 +3,7 @@ title: Offline seeding workflow for MARS using customer-owned disks with Azure I
 description: Learn how you can use Azure Backup to send data off the network by using the Azure Import/Export service. This article explains the offline seeding of the initial backup data by using the Azure Import/Export service.
 ms.reviewer: saurse
 ms.topic: how-to
-ms.date: 01/26/2024
+ms.date: 05/24/2024
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
@@ -56,7 +56,7 @@ Before you start the offline backup workflow, complete the following prerequisit
 * Azure PowerShell 3.7.0 is required on the computer running the Azure Backup Agent. Download and [install the 3.7.0 version of Azure PowerShell](https://github.com/Azure/azure-powershell/releases/tag/v3.7.0-March2017).
 * On the computer running the Azure Backup Agent, make sure that Microsoft Edge or Internet Explorer 11 is installed and JavaScript is enabled.
 * Create an Azure storage account in the same subscription as the Recovery Services vault.
-* Make sure you have the [necessary permissions](../active-directory/develop/howto-create-service-principal-portal.md) to create the Microsoft Entra application. The offline backup workflow creates a Microsoft Entra application in the subscription associated with the Azure storage account. The goal of the application is to provide Azure Backup with secure and scoped access to the Azure Import/Export service, which is required for the offline backup workflow.
+* Ensure that you have the [necessary permissions](/entra/identity/role-based-access-control/permissions-reference#application-administratorl) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the **Azure Storage account**. This application allows the **Azure Backup Service** a *secure and scoped access* to the **Azure Import Service**, required for the Offline Backup workflow.
 * Register the *Microsoft.DataBox* resource provider with the subscription that contains the Azure storage account. To register the resource provider:
     1. On the main menu, select **Subscriptions**.
     1. If you're subscribed to multiple subscriptions, select the subscription you plan to use for the offline backup. If you use only one subscription, then your subscription appears.

articles/backup/backup-azure-backup-server-import-export.md

@@ -2,7 +2,7 @@
 title: Offline seeding workflow for DPM and MABS using customer-owned disks with Azure Import/Export - Azure Backup
 description: With Azure Backup, you can send data off the network by using the Azure Import/Export service. This article explains the offline backup workflow for DPM and Azure Backup Server.
 ms.topic: how-to
-ms.date: 12/05/2022
+ms.date: 05/24/2024
 ms.service: backup
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -14,16 +14,6 @@ This article describes how to send the initial full backup data from DPM/MABS to
 
 System Center Data Protection Manager and Azure Backup Server (MABS) integrate with Azure Backup and use several built-in efficiencies that save network and storage costs during the initial full backups of data to Azure. Initial full backups typically transfer large amounts of data and require more network bandwidth when compared to subsequent backups that transfer only the deltas/incrementals. Azure Backup compresses the initial backups. Through the process of offline seeding, Azure Backup can use disks to upload the compressed initial backup data offline to Azure.
 
-In this article, you'll learn about:
-
-> [!div class="checklist"]
-> - Offline-seeding process
-> - Supported capabilities
-> - Prerequisites
-> - Workflow
-> - How to initiate offline backup
-> - How to prepare SATA drives and ship to Azure
-> - How to update the tracking and shipping details on the Azure import job
 
 >[!IMPORTANT]
 > These steps are applicable for DPM 2019 UR1 (or above) and MABS v3 UR1 (or higher). Ensure that you've the latest MARS agent (version 2.0.9250.0 or higher) before following the below section. [Learn more](backup-azure-mars-troubleshoot.md#mars-offline-seeding-using-customer-owned-disks-importexport-is-not-working).
@@ -60,7 +50,7 @@ Ensure that the following prerequisites are met before you start the offline bac
 
 * On the DPM or MABS server, make sure Microsoft Edge or Internet Explorer 11 is installed, and JavaScript is enabled.
 * Create an Azure Storage account in the same subscription as the Recovery Services vault.
-* Make sure you have the [necessary permissions](../active-directory/develop/howto-create-service-principal-portal.md) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the Azure Storage account. The goal of the application is to provide Azure Backup with secure and scoped access to the Azure Import Service, required for the Offline Backup workflow.
+* Ensure that you have the [necessary permissions](/entra/identity/role-based-access-control/permissions-reference#application-administratorl) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the **Azure Storage account**. This application allows the **Azure Backup Service** a *secure and scoped access* to the **Azure Import Service**, required for the Offline Backup workflow.
 * Register the Microsoft.DataBox resource provider with the subscription containing the Azure Storage account. To register the resource provider:
     1. In the main menu, select **Subscriptions**.
     2. If you're subscribed to multiple subscriptions, select the subscription you're using for the offline backup. If you use only one subscription, then your subscription appears.

articles/backup/offline-backup-azure-data-box-dpm-mabs.md

@@ -2,7 +2,7 @@
 title: Offline Backup with Azure Data Box for DPM and MABS
 description: You can use Azure Data Box to seed initial Backup data offline from DPM and MABS.
 ms.topic: conceptual
-ms.date: 04/24/2024
+ms.date: 05/24/2024
 ms.service: backup
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -54,7 +54,7 @@ Ensure the following:
 
 - A valid Azure subscription.
 - The user intended to perform the offline backup policy must be an owner of the Azure subscription.
-- Ensure that you have the [necessary permissions](/entra/identity-platform/howto-create-service-principal-portal) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the Azure Storage account. The goal of the application is to provide Azure Backup with secure and scoped access to the Azure Import Service, required for the Offline Backup workflow.
+- Ensure that you have the [necessary permissions](/entra/identity/role-based-access-control/permissions-reference#application-administratorl) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the **Azure Storage account**. This application allows the **Azure Backup Service** a *secure and scoped access* to the **Azure Import Service**, required for the Offline Backup workflow.
 - The Data Box job and the Recovery Services vault to which the data needs to be seeded must be available in the same subscriptions.
 
   >[!NOTE]

articles/backup/offline-backup-azure-data-box.md

@@ -2,7 +2,7 @@
 title: Offline backup by using Azure Data Box
 description: Learn how you can use Azure Data Box to seed large initial backup data offline from the MARS Agent to a Recovery Services vault. 
 ms.topic: how-to
-ms.date: 10/25/2023
+ms.date: 05/24/2024
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ms.service: backup
@@ -66,6 +66,7 @@ The process to seed data from the MARS Agent by using Azure Data Box is supporte
 - The process requires that the user designated to perform the offline backup policy is an owner of the Azure subscription.
 - The Data Box job and the Recovery Services vault (to which the data needs to be seeded) are required to be in the same subscriptions.
 - We recommend that the target storage account associated with the Azure Data Box job and the Recovery Services vault are in the same region. However, this isn't necessary.
+- Ensure that you have the [necessary permissions](/entra/identity/role-based-access-control/permissions-reference#application-administratorl) to create the Microsoft Entra application. The Offline Backup workflow creates a Microsoft Entra application in the subscription associated with the **Azure Storage account**. This application allows the **Azure Backup Service** a *secure and scoped access* to the **Azure Import Service**, required for the Offline Backup workflow.
 
 ### Get Azure PowerShell 3.7.0