You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-database-postgresql-overview.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,7 @@ Azure Backup and Azure database services have come together to build an enterpri
20
20
21
21
You can use this solution independently or in addition to the [native backup solution in Azure PostgreSQL](/azure/postgresql/concepts-backup), which offers retention up to 35 days. The native solution is suited for operational recoveries, such as when you want to recover from the latest backups. The Azure Backup solution helps you with your compliance needs and provides a more granular and flexible backup/restore capability.
22
22
23
-
## Changes to vaulted backups for PostgreSQL single servers
23
+
## <aname = "changes-to-vaulted-backups-for-postgresql-single-server"></a>Changes to vaulted backups for PostgreSQL single servers
24
24
25
25
The *single server* deployment option for Azure Database for PostgreSQL retired on *March 28, 2025*. On that date, changes were implemented to Azure Backup for PostgreSQL single servers. [Learn more about the retirement](/azure/postgresql/migrate/whats-happening-to-postgresql-single-server).
26
26
@@ -62,7 +62,7 @@ You can restore PostgreSQL single-server databases by using **Restore as Files**
62
62
63
63
:::image type="content" source="./media/backup-azure-database-postgresql-overview/backup-process.png" alt-text="Diagram that shows the backup process.":::
64
64
65
-
## Azure Backup authentication with the Azure Database for PostgreSQL server
65
+
## <aname = "azure-backup-authentication-with-the-postgresql-server"></a>Azure Backup authentication with the Azure Database for PostgreSQL server
66
66
67
67
Azure Backup follows strict security guidelines from Azure. Permissions on the resource to be backed up aren't assumed. The user needs to explicitly give those permissions.
68
68
@@ -74,7 +74,7 @@ The workload admin is responsible for managing and rotating credentials. Azure B
74
74
75
75
:::image type="content" source="./media/backup-azure-database-postgresql-overview/key-vault-based-authentication-model.png" alt-text="Diagram that shows the workload or database flow.":::
76
76
77
-
#### Permissions needed for PostgreSQL database backup
77
+
#### <aname = "set-of-permissions-needed-for-azure-postgresql-database-backup"></a>Permissions needed for PostgreSQL database backup
78
78
79
79
1. Grant the following access permissions to the Azure Backup vault's managed identity:
80
80
@@ -91,7 +91,7 @@ The workload admin is responsible for managing and rotating credentials. Azure B
91
91
> [!NOTE]
92
92
> You can grant these permissions within the [configure backup](backup-azure-database-postgresql.md#configure-a-backup-on-postgresql-databases) flow with a single click if you, as the backup admin, have write access on the intended resources. If you don't have the required permissions (when multiple personas are involved), use an Azure Resource Manager template.
93
93
94
-
#### Permissions needed for PostgreSQL database restore
94
+
#### <aname = "set-of-permissions-needed-for-azure-postgresql-database-restore"></a>Permissions needed for PostgreSQL database restore
95
95
96
96
Permissions for restore are similar to the ones that you need for backup. You need to [manually grant the permissions on the target Azure Database for PostgreSQL server and the corresponding key vault](#steps-for-manually-granting-access-on-the-azure-database-for-postgresql-server-and-on-the-key-vault). Unlike in the [configure backup](backup-azure-database-postgresql.md#configure-a-backup-on-postgresql-databases) flow, the experience to grant these permissions inline is currently not available.
97
97
@@ -115,7 +115,7 @@ To get an automated script and related instructions to use the Microsoft Entra I
115
115
116
116
To grant all the access permissions that Azure Backup needs, use the following steps.
117
117
118
-
### Access permissions on the Azure Database for PostgreSQL server
118
+
### <aname = "access-permissions-on-the-azure-postgresql-server"></a>Access permissions on the Azure Database for PostgreSQL server
119
119
120
120
1. Set the Azure Backup vault's **Reader** access for the managed identity on the Azure Database for PostgreSQL server.
121
121
@@ -125,7 +125,7 @@ To grant all the access permissions that Azure Backup needs, use the following s
125
125
126
126
:::image type="content" source="./media/backup-azure-database-postgresql-overview/network-line-of-sight-access-on-azure-postgresql-server.png" alt-text="Screenshot that shows the option to set network line-of-sight access on an Azure Database for PostgreSQL server." lightbox="./media/backup-azure-database-postgresql-overview/network-line-of-sight-access-on-azure-postgresql-server.png":::
127
127
128
-
### Access permissions on the key vault
128
+
### <aname = "access-permissions-on-the-azure-key-vault-associated-with-the-postgresql-server"></a>Access permissions on the key vault
129
129
130
130
1. Set the Azure Backup vault's **Key Vault Secrets User** access for the managed identity on the key vault (**Get** and **List** permissions on secrets). To assign permissions, you can use role assignments or access policies. You don't need to add the permissions by using both options, because it doesn't help.
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-database-postgresql.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,7 +12,7 @@ ms.author: jsuri
12
12
13
13
This article describes how to back up an Azure Database for PostgreSQL server. Before you begin, review the [supported configurations, feature considerations, and known limitations](./backup-azure-database-postgresql-support-matrix.md), along with [frequently asked questions](/azure/backup/backup-azure-database-postgresql-server-faq).
14
14
15
-
## Configure a backup on PostgreSQL databases
15
+
## <aname = "configure-backup-on-azure-postgresql-databases"></a>Configure a backup on PostgreSQL databases
16
16
17
17
You can configure a backup on multiple databases across multiple Azure Database for PostgreSQL servers. To configure this kind of backup by using Azure Backup, follow these steps:
18
18
@@ -113,7 +113,7 @@ You can configure a backup on multiple databases across multiple Azure Database
113
113
114
114
:::image type="content" source="./media/backup-azure-database-postgresql/submit-configure-backup-operation-inline.png" alt-text="Screenshot that shows the details for a configured backup." lightbox="./media/backup-azure-database-postgresql/submit-configure-backup-operation-expanded.png":::
115
115
116
-
## Create a backup policy
116
+
## <aname = "create-backup-policy"></a>Create a backup policy
117
117
118
118
You can create a backup policy during the flow for configuring a backup. Alternatively, go to **Backup center** > **Backup policies** > **Add**.
119
119
@@ -148,7 +148,7 @@ Retention rules are evaluated in a predetermined order of priority. The priority
148
148
149
149
Default retention settings apply when no other rules qualify. For example, the same recovery point might be the first successful backup taken every week, along with the first successful backup taken every month. However, because the priority of the monthly rule is higher than that of the weekly rule, the retention that corresponds to the first successful backup taken every month applies.
150
150
151
-
## Create a secret in the key vault
151
+
## <aname = "create-secrets-in-the-key-vault"></a>Create a secret in the key vault
152
152
153
153
The secret is the Azure Database for PostgreSQL server connection string in *ADO.NET* format. It's updated with the credentials of the database user who's granted the backup privileges on the server.
154
154
@@ -158,7 +158,7 @@ Copy the connection string from the Azure Database for PostgreSQL server, and us
158
158
159
159
:::image type="content" source="./media/backup-azure-database-postgresql/create-secret-inline.png" alt-text="Screenshot that shows the pane for creating a secret and a Notepad file that contains a connection string." lightbox="./media/backup-azure-database-postgresql/create-secret-expanded.png":::
160
160
161
-
## Run the PowerShell script to grant privileges to database users
161
+
## <aname = "run-powershell-script-to-grant-privileges-to-database-users"></a>Run the PowerShell script to grant privileges to database users
162
162
163
163
The PowerShell script that's dynamically generated during the process of configuring a backup accepts the database user as the input, along with the PostgreSQL admin credentials, to grant the backup-related privileges to the database user on the database.
0 commit comments