Freshness - Az Disk backup TSG

Author: AbhishekMallick-MS

articles/backup/disk-backup-troubleshoot.md

@@ -2,7 +2,7 @@
 title: Troubleshooting backup failures in Azure Disk Backup
 description: Learn how to troubleshoot backup failures in Azure Disk Backup
 ms.topic: troubleshooting
-ms.date: 08/27/2024
+ms.date: 08/07/2025
 author: AbhishekMallick-MS
 ms.author: v-mallicka
 # Customer intent: "As an IT administrator, I want to troubleshoot backup failures in Azure Disk Backup, so that I can ensure successful backup and restore operations for my organization's data."
@@ -12,7 +12,7 @@ ms.author: v-mallicka
 
 This article provides troubleshooting information on backup and restore issues faced with Azure Disk. For more information on the [Azure Disk backup](disk-backup-overview.md) region availability, supported scenarios and limitations, see the [support matrix](disk-backup-support-matrix.md).
 
-## Common issues faced with Azure Disk Backup
+## Common issues in Azure Disk Backup
 
 ### Error Code: UserErrorSnapshotRGSubscriptionMismatch
 
@@ -38,59 +38,62 @@ Error Message: This error code appears when a Delete or Read Lock has been appli
 
 Recommended Action: In case if you are configuring a new backup instance, use a resource group without a delete or read lock. If the backup instance already configured then remove the lock from the snapshot resource group. 
 
-### Error Code: UserErrorNotEnoughPermissionOnDisk
 
-Error Message: Azure Backup Service requires additional permissions on the Disk to do this operation.
+### Error Code: UserErrorOperationalStoreParametersNotProvided
 
-Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the disk. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are needed to be assigned to the Backup Vault managed identity and how to provide it.
+Error Message: Could not perform the operation as Snapshot Data store Resource Group parameter is not provided
 
-### Error Code: UserErrorNotEnoughPermissionOnSnapshotRG
+Recommended Action: Provide the snapshot data store resource group parameter. The snapshot data store resource group is the location where the disk snapshots are stored. For more information, see [the documentation](backup-managed-disks.md).
 
-Error Message: Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
+### Error Code: UserErrorInvalidOperationalStoreResourceGroup
 
-Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the disk snapshots are stored. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are required by the Backup Vault managed identity over the resource group and how to provide them.
+Error Message: Snapshot Data store Resource Group provided is invalid
 
-### Error Code: UserErrorDiskBackupDiskOrMSIPermissionsNotPresent
+Recommended Action: Provide a valid resource group for the snapshot data store. The snapshot data store resource group is the location where the disk snapshots are stored. For more information, see [the documentation](backup-managed-disks.md).
 
-Error Message: Invalid disk or Azure Backup Service requires additional permissions on the Disk to do this operation
+### Error Code: UserErrorDiskBackupDiskTypeNotSupported
 
-Recommended Action: The backups are failing as the source disk may be deleted or moved to a different location. Use the existing restore point to restore the disk if it deleted by mistake. If the disk is moved to a different location, configure backup for the disk. If the disk isn't deleted or moved, grant the Backup vault's managed identity the appropriate permissions on the disk. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity.
+Error Message: Unsupported disk type
 
-### Error Code: UserErrorDiskBackupSnapshotRGOrMSIPermissionsNotPresent
+Recommended Action: Refer to [the support matrix](disk-backup-support-matrix.md) on unsupported scenarios and limitations.
 
-Error Message: Could not perform the operation as Snapshot Data store Resource Group no longer exists. Or Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
+### Error Code: UserErrorSubscriptionDiskQuotaLimitReached
 
-Recommended Action: Create a resource group and grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the disk snapshots are stored. Refer to [the  documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity over the resource group.
+Error Message: Operation is failed as the maximum limit for disk quota is reached for the subscription.
 
-### Error Code: UserErrorDiskBackupAuthorizationFailed
+Recommended Action: Refer to the [Azure subscription and service limits and quota documentation](../azure-resource-manager/management/azure-subscription-service-limits.md) or contact Microsoft Support for further guidance.
 
-Error Message: Backup Vault managed identity is missing the necessary permissions to do this operation.
+### Error Code: BackupAgentPluginHostValidateProtectionError
 
-Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the disk to be backed up and on the snapshot data store resource group where the snapshots are stored. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity.
+Error Message: Disk Backup is not yet available in the region of the Backup Vault under which Configure Protection is being tried.
 
-### Error Code: UserErrorSnapshotRGOrMSIPermissionsNotPresent
+Recommended Action: Backup Vault must be in a supported region. For region availability, see the [the support matrix](disk-backup-support-matrix.md).
 
-Error Message: Could not perform the operation as Snapshot Data store Resource Group no longer exists. Or, Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
+### Error Code: UserErrorDppDatasourceAlreadyHasBackupInstance
 
-Recommended Action: Create the resource group and grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the snapshots are stored. Refer to [the  documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity over resource group.
+Error Message: The disk you're trying to configure backup is already being protected. Disk is already associated with a backup instance in a Backup vault.
 
-### Error Code: UserErrorOperationalStoreParametersNotProvided
+Recommended Action: This disk is already associated with a backup instance in a Backup vault. If you want to reprotect this disk, then delete the backup instance from the Backup vault where it was protected and reprotect the disk in any other vault.
 
-Error Message: Could not perform the operation as Snapshot Data store Resource Group parameter is not provided
+### Error Code: UserErrorDppDatasourceAlreadyProtected
 
-Recommended Action: Provide the snapshot data store resource group parameter. The snapshot data store resource group is the location where the disk snapshots are stored. For more information, see [the documentation](backup-managed-disks.md).
+Error Message: The disk you're trying to configure backup is already being protected. Disk is already associated with a backup instance in a Backup vault.
 
-### Error Code: UserErrorInvalidOperationalStoreResourceGroup
+Recommended Action: This disk is already associated with a backup instance in a Backup vault. If you want to reprotect this disk, then delete the backup instance from the Backup vault where it is currently protected and reprotect the disk in any other vault.
 
-Error Message: Snapshot Data store Resource Group provided is invalid
+### Error Code: UserErrorMaxConcurrentOperationLimitReached
 
-Recommended Action: Provide a valid resource group for the snapshot data store. The snapshot data store resource group is the location where the disk snapshots are stored. For more information, see [the documentation](backup-managed-disks.md).
+Error Message: Unable to start the operation as maximum number of allowed concurrent backups is reached.
 
-### Error Code: UserErrorDiskBackupDiskTypeNotSupported
+Recommended Action: Wait until the previous running backup completes.
 
-Error Message: Unsupported disk type
+### Error Code: UserErrorMissingSubscriptionRegistration
 
-Recommended Action: Refer to [the support matrix](disk-backup-support-matrix.md) on unsupported scenarios and limitations.
+Error Message: The subscription isn't registered to use namespace Microsoft.Compute
+
+Recommended Action: The required resource provider is not registered for your subscription. Register both the resource providers' namespace (_Microsoft.Compute_ and _Microsoft.Storage_) using the steps in [Solution 3](../azure-resource-manager/templates/error-register-resource-provider.md#solution-3---azure-portal).
+
+## Common issues in Azure Disk restore
 
 ### Error Code: UserErrorSameNameDiskAlreadyExists
 
@@ -110,80 +113,81 @@ Error Message: Azure Backup Service requires additional permissions on the Targe
 
 Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the target resource group. The target resource group is the selected location where the disk is to be restored. Refer to the [restore documentation](restore-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity.
 
-### Error Code: UserErrorSubscriptionDiskQuotaLimitReached
+### Error Code: UserErrorDiskSnapshotNotFound
 
-Error Message: Operation is failed as the maximum limit for disk quota is reached for the subscription.
+Error Message: The disk snapshot for this Restore point is not accessible.
 
-Recommended Action: Refer to the [Azure subscription and service limits and quota documentation](../azure-resource-manager/management/azure-subscription-service-limits.md) or contact Microsoft Support for further guidance.
+Recommended Action: Snapshots are stored in the snapshot data store resource group within your subscription. The snapshot related to the selected restore point is either deleted or moved from this resource group. Consider using another Recovery point to restore. Also, follow the recommended guidelines for choosing Snapshot resource group mentioned in the [restore documentation](restore-managed-disks.md).
 
-### Error Code: UserErrorDiskBackupRestoreRGOrMSIPermissionsNotPresent
+### Error Code: UserErrorSnapshotMetadataNotFound
 
-Error Message: Operation failed as the Target Resource Group doesn't exist. Or Azure Backup Service requires additional permissions on the Target Resource Group to do this operation.
+Error Message: The disk snapshot metadata for this Restore point is deleted
 
-Recommended Action: Provide a valid resource group to restore, and grant the Backup vault's managed identity the appropriate permissions on the target resource group. The target resource group is the selected location where the disk is to be restored. Refer to the [restore documentation](restore-managed-disks.md) to understand what permissions are required to be assigned to the Backup vault's managed identity.
+Recommended Action: Consider using another recovery point to restore. For more information, see the [restore documentation](restore-managed-disks.md).
+
+## Common Key Vault-related issues in Azure Disk protection
 
 ### Error Code: UserErrorDESKeyVaultKeyDisabled
 
 Error Message: The key vault key used for disk encryption set is not in enabled state.
 
 Recommended Action: Enable the key vault key used for disk encryption set. Refer to the limitations in the [support matrix](disk-backup-support-matrix.md).
 
-### Error Code: UserErrorMSIPermissionsNotPresentOnDES
-
-Error Message: Azure Backup Service needs permission to access the disk encryption set used with the disk.
-
-Recommended Action: Provide Reader access to the Backup vault's managed identity to the disk encryption set (DES).
-
 ### Error Code: UserErrorDESKeyVaultKeyNotAvailable
 
 Error Message: The key vault key used for disk encryption set is not available.
 
 Recommended Action: Ensure that the key vault key used for disk encryption set isn't disabled or deleted.
 
-### Error Code: UserErrorDiskSnapshotNotFound
+## Common issues with Azure Disk backup permissions and access control
 
-Error Message: The disk snapshot for this Restore point is not accessible.
+### Error Code: UserErrorNotEnoughPermissionOnDisk
 
-Recommended Action: Snapshots are stored in the snapshot data store resource group within your subscription. The snapshot related to the selected restore point is either deleted or moved from this resource group. Consider using another Recovery point to restore. Also, follow the recommended guidelines for choosing Snapshot resource group mentioned in the [restore documentation](restore-managed-disks.md).
+Error Message: Azure Backup Service requires additional permissions on the Disk to do this operation.
 
-### Error Code: UserErrorSnapshotMetadataNotFound
+Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the disk. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are needed to be assigned to the Backup Vault managed identity and how to provide it.
 
-Error Message: The disk snapshot metadata for this Restore point is deleted
+### Error Code: UserErrorNotEnoughPermissionOnSnapshotRG
 
-Recommended Action: Consider using another recovery point to restore. For more information, see the [restore documentation](restore-managed-disks.md).
+Error Message: Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
 
-### Error Code: BackupAgentPluginHostValidateProtectionError
+Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the disk snapshots are stored. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are required by the Backup Vault managed identity over the resource group and how to provide them.
 
-Error Message: Disk Backup is not yet available in the region of the Backup Vault under which Configure Protection is being tried.
+### Error Code: UserErrorDiskBackupDiskOrMSIPermissionsNotPresent
 
-Recommended Action: Backup Vault must be in a supported region. For region availability, see the [the support matrix](disk-backup-support-matrix.md).
+Error Message: Invalid disk or Azure Backup Service requires additional permissions on the Disk to do this operation
 
-### Error Code: UserErrorDppDatasourceAlreadyHasBackupInstance
+Recommended Action: The backups are failing as the source disk may be deleted or moved to a different location. Use the existing restore point to restore the disk if it deleted by mistake. If the disk is moved to a different location, configure backup for the disk. If the disk isn't deleted or moved, grant the Backup vault's managed identity the appropriate permissions on the disk. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity.
 
-Error Message: The disk you're trying to configure backup is already being protected. Disk is already associated with a backup instance in a Backup vault.
+### Error Code: UserErrorDiskBackupSnapshotRGOrMSIPermissionsNotPresent
 
-Recommended Action: This disk is already associated with a backup instance in a Backup vault. If you want to reprotect this disk, then delete the backup instance from the Backup vault where it was protected and reprotect the disk in any other vault.
+Error Message: Could not perform the operation as Snapshot Data store Resource Group no longer exists. Or Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
 
-### Error Code: UserErrorDppDatasourceAlreadyProtected
+Recommended Action: Create a resource group and grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the disk snapshots are stored. Refer to [the  documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity over the resource group.
 
-Error Message: The disk you're trying to configure backup is already being protected. Disk is already associated with a backup instance in a Backup vault.
+### Error Code: UserErrorDiskBackupAuthorizationFailed
 
-Recommended Action: This disk is already associated with a backup instance in a Backup vault. If you want to reprotect this disk, then delete the backup instance from the Backup vault where it is currently protected and reprotect the disk in any other vault.
+Error Message: Backup Vault managed identity is missing the necessary permissions to do this operation.
 
-### Error Code: UserErrorMaxConcurrentOperationLimitReached
+Recommended Action: Grant the Backup vault's managed identity the appropriate permissions on the disk to be backed up and on the snapshot data store resource group where the snapshots are stored. Refer to [the documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity.
 
-Error Message: Unable to start the operation as maximum number of allowed concurrent backups is reached.
+### Error Code: UserErrorSnapshotRGOrMSIPermissionsNotPresent
 
-Recommended Action: Wait until the previous running backup completes.
+Error Message: Could not perform the operation as Snapshot Data store Resource Group no longer exists. Or, Azure Backup Service requires additional permissions on the Snapshot Data store Resource Group to do this operation.
 
-### Error Code: UserErrorMissingSubscriptionRegistration
+Recommended Action: Create the resource group and grant the Backup vault's managed identity the appropriate permissions on the snapshot data store resource group. The snapshot data store resource group is the location where the snapshots are stored. Refer to [the  documentation](backup-managed-disks.md) to understand what permissions are to be assigned to the Backup vault's managed identity over resource group.
 
-Error Message: The subscription isn't registered to use namespace Microsoft.Compute
+### Error Code: UserErrorDiskBackupRestoreRGOrMSIPermissionsNotPresent
 
-Recommended Action: The required resource provider is not registered for your subscription. Register both the resource providers' namespace (_Microsoft.Compute_ and _Microsoft.Storage_) using the steps in [Solution 3](../azure-resource-manager/templates/error-register-resource-provider.md#solution-3---azure-portal).
+Error Message: Operation failed as the Target Resource Group doesn't exist. Or Azure Backup Service requires additional permissions on the Target Resource Group to do this operation.
 
+Recommended Action: Provide a valid resource group to restore, and grant the Backup vault's managed identity the appropriate permissions on the target resource group. The target resource group is the selected location where the disk is to be restored. Refer to the [restore documentation](restore-managed-disks.md) to understand what permissions are required to be assigned to the Backup vault's managed identity.
 
+### Error Code: UserErrorMSIPermissionsNotPresentOnDES
 
+Error Message: Azure Backup Service needs permission to access the disk encryption set used with the disk.
+
+Recommended Action: Provide Reader access to the Backup vault's managed identity to the disk encryption set (DES).
 
 ### Error code: LinkedAuthorizationFailed