Merge pull request #243911 from AbhishekMallick-MS/Jul-5-2023-CSRBV

CSR for Backup vault

Author: v-dirichards

articles/backup/create-manage-backup-vault.md

@@ -2,7 +2,7 @@
 title: Create and manage Backup vaults
 description: Learn how to create and manage the Backup vaults.
 ms.topic: how-to
-ms.date: 07/05/2023
+ms.date: 08/10/2023
 ms.custom: references_regions
 ms.service: backup
 author: AbhishekMallick-MS
@@ -136,7 +136,7 @@ The vault move across subscriptions and resource groups is supported in all publ
 
 1. In the **Resource group** drop-down list, select an existing resource group or select **Create new** to create a new resource group.
 
-   The subscription remains the same and gets auto-populated.
+   The subscription remains the same and gets auto populated.
 
    :::image type="content" source="./media/backup-vault-overview/select-existing-or-create-resource-group-inline.png" alt-text="Screenshot showing the selection of an existing resource group or creation of a new resource group." lightbox="./media/backup-vault-overview/select-existing-or-create-resource-group-expanded.png":::
 
@@ -274,6 +274,31 @@ Follow these steps:
 
    :::image type="content" source="./media/backup-vault-overview/monitor-postgresql-restore-to-secondary-region.png" alt-text="Screenshot shows how to monitor the postgresql restore to the secondary region." lightbox="./media/backup-vault-overview/monitor-postgresql-restore-to-secondary-region.png":::
 
+## Cross Subscription Restore using Azure portal
+
+Some datasources of Backup vault support restore to a subscription different from that of the source machine. Cross Subscription Restore (CSR) is enabled for existing vaults by default, and you can use it if supported for the intended datasource.
+
+>[!Note]
+>The feature is currently not supported for Azure Kubernetes Service (AKS) and Azure VMWare Service (AVS) backup.
+
+To do Cross Subscription Restore, follow these steps:
+
+1. In the *Backup vault*, go to **Backup Instance** > **Restore**.
+1. Choose the *Subscription* to which you want to restore, and then select **Restore**.
+
+There may be instances when you need to disable Cross Subscription Restore based on your cloud infrastructure. You can enable, disable, or permanently disable Cross Subscription Restore for existing vaults by selecting *Backup vault* > **Properties** > **Cross Subscription Restore**.
+
+:::image type="content" source="./media/create-manage-backup-vault/disable-cross-subscription-restore-for-backup-vault.png" alt-text="Screenshot shows how to disable Cross Subscription Restore for Backup vault." lightbox="./media/create-manage-backup-vault/disable-cross-subscription-restore-for-backup-vault.png":::
+
+You can also select the state of CSR  during the creation of Backup vault.
+
+:::image type="content" source="./media/create-manage-backup-vault/select-cross-subscription-state-on-backup-vault-creation.png" alt-text="Screenshot shows how to select the state of Cross Subscription Restore during Backup vault creation." lightbox="./media/create-manage-backup-vault/select-cross-subscription-state-on-backup-vault-creation.png":::
+
+>[!Note]
+>- CSR once permanently disabled on a vault can't be re-enabled because it's an irreversible operation.
+>- If CSR is disabled but not permanently disabled, then you can reverse the operation by selecting **Vault** > **Properties** > **Cross Subscription Restore** > **Enable**.
+>- If a Backup vault is moved to a different subscription when CSR is disabled or permanently disabled, restore to the original subscription will fail.
+ 
 ## Next steps
 
 - [Configure backup on Azure PostgreSQL databases](backup-azure-database-postgresql.md#configure-backup-on-azure-postgresql-databases)