Skip to content

Commit 71c95cb

Browse files
Merge pull request #295698 from AbhishekMallick01/Mar-4-2025-EEE1
Addressed EEE doc ask #26116824
2 parents 5667b52 + 1b54dc8 commit 71c95cb

File tree

1 file changed

+12
-12
lines changed

1 file changed

+12
-12
lines changed

articles/backup/backup-rbac-rs-vault.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Manage Backups with Azure role-based access control
33
description: Use Azure role-based access control to manage access to backup management operations in Recovery Services vault.
44
ms.reviewer: dapatil
55
ms.topic: how-to
6-
ms.date: 05/26/2025
6+
ms.date: 05/30/2025
77
ms.service: azure-backup
88
author: jyothisuri
99
ms.author: jsuri
@@ -122,20 +122,20 @@ The following table captures the Backup management actions and corresponding Azu
122122

123123
### Minimum role requirements for Azure blob backup
124124

125-
| Management Operation | Minimum Azure role required | Scope Required | Alternative |
125+
| Management Operation| Minimum Azure role required | Scope Required | Alternative |
126126
| --- | --- | --- | --- |
127-
| Validate before configuring backup | Backup Operator | Backup vault <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
128-
| | Storage account backup contributor | Storage account containing the blob | |
129-
| Enable backup from backup vault | Backup Operator | Backup vault <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
130-
| | Storage account backup contributor | Storage account containing the blob | In addition, the backup vault MSI should be given [these permissions](./blob-backup-configure-manage.md#grant-permissions-to-the-backup-vault-on-storage-accounts) |
131-
| On demand backup of blob | Backup Operator | Backup vault <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
132-
| Validate before restoring a blob | Backup Operator | Backup vault <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
133-
| | Storage account backup contributor | Storage account containing the blob | |
134-
| Restoring a blob | Backup Operator | Backup vault | |
135-
| | Storage account backup contributor | Storage account containing the blob | In addition, the backup vault MSI should be given [these permissions](./blob-backup-configure-manage.md#grant-permissions-to-the-backup-vault-on-storage-accounts) |
127+
| Validate before configuring backup | Backup Operator | Backup vault: <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
128+
| | Storage account backup contributor | Storage account containing the blob | |
129+
| Enable backup from backup vault | Backup Operator | Backup vault: <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
130+
| | Storage account backup contributor | Storage account containing the blob | In addition, the backup vault MSI should be given [these permissions](blob-backup-configure-manage.md#grant-permissions-to-the-backup-vault-on-storage-accounts). |
131+
| On-demand backup of blob | Backup Operator | Backup vault: <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read| |
132+
| Validate before restoring a blob | Backup Operator | Backup vault: <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
133+
| | Storage account backup contributor | Storage account containing the blob | |
134+
| Restoring a blob | Backup Operator | Backup vault: <br><br> - Resources/deployments/validate/action <br> - Resources/deployments/write <br> - Resources/subscriptions/resourceGroups/read | |
135+
| | Storage account backup contributor | Storage account containing the blob | In addition, the backup vault MSI should be given [these permissions](blob-backup-configure-manage.md#grant-permissions-to-the-backup-vault-on-storage-accounts). |
136136

137137
>[!Note]
138-
>For Storage account validation operation, the Backup vault Managed ID must have the **Owner** privileges.
138+
>For the **Storage account validation** operation, the Backup Vault Managed ID need to have **Owner privileges**.
139139
140140
### Minimum role requirements for Azure database for PostgreSQL server backup
141141

0 commit comments

Comments
 (0)