You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: This article explains about the concept of private endpoints for Azure Backup that helps to perform backups while maintaining the security of your resources.
4
4
ms.topic: overview
5
5
ms.service: azure-backup
6
-
ms.date: 07/30/2024
6
+
ms.date: 10/01/2024
7
7
author: AbhishekMallick-MS
8
8
ms.author: v-abhmallick
9
9
---
@@ -56,6 +56,7 @@ The following table lists the scenarios and recommendations:
56
56
| Backup of workloads in Azure VM (SQL, SAP HANA), Backup using MARS Agent, DPM server. | Use of private endpoints is recommended to allow backup and restore without needing to add to an allowlist any IPs/FQDNs for Azure Backup or Azure Storage from your virtual networks. In that scenario, ensure that VMs that host SQL databases can reach Microsoft Entra IPs or FQDNs. |
57
57
| Azure VM backup | VM backup doesn't require you to allow access to any IPs or FQDNs. So, it doesn't require private endpoints for backup and restore of disks. <br><br> However, file recovery from a vault containing private endpoints would be restricted to virtual networks that contain a private endpoint for the vault. <br><br> When using ACL’ed unmanaged disks, ensure the storage account containing the disks allows access to trusted Microsoft services if it's ACL'ed. |
58
58
| Azure Files backup | Azure Files backups are stored in the local storage account. So it doesn't require private endpoints for backup and restore. |
59
+
|**Changed Vnet for Private endpoint in the Vault and Virtual Machine**| Stop backup protection and configure backup protection in a new vault with Private Endpoints enabled. |
59
60
60
61
>[!Note]
61
62
>Private endpoints are supported with only DPM server 2022, MABS v4, and later.
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-sap-hana-database-troubleshoot.md
+8-1Lines changed: 8 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Troubleshoot SAP HANA databases back up errors
3
3
description: Describes how to troubleshoot common errors that might occur when you use Azure Backup to back up SAP HANA databases.
4
4
ms.topic: troubleshooting
5
-
ms.date: 09/30/2024
5
+
ms.date: 10/01/2024
6
6
ms.service: azure-backup
7
7
author: AbhishekMallick-MS
8
8
ms.author: v-abhmallick
@@ -219,6 +219,13 @@ See the [prerequisites](tutorial-backup-sap-hana-db.md#prerequisites) and [What
219
219
| **Possible Causes** | Restore as files is failing due to *directory* that is selected for restore doesn't exist on the Target server or isn't accessible.
220
220
|**Recommended action**| Verify the directory that you selected is available on the target server and ensure you have selected the correct target server at the time of restore. |
221
221
222
+
### JobCancelledOnExtensionUpgrade
223
+
224
+
| Error message | The Backup job was canceled because the workload backup extension service restarted for an upgrade. |
225
+
| --- | --- |
226
+
|**Possible cause**| The backup and restore job fails due to automatic Extension upgrade when the backup/restore operation is in progress. |
227
+
|**Recommended action**| Wait for the extension upgrade to complete. HANA then re-triggers the failed log backups, if any. <br><br> However, the failed Full/ Differential/ Incremental backups won't be re-triggered by Azure Backup and you need to manually retrigger this operation. |
Copy file name to clipboardExpand all lines: articles/backup/private-endpoints-overview.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Private endpoints overview
3
3
description: Understand the use of private endpoints for Azure Backup and the scenarios where using private endpoints helps maintain the security of your resources.
4
4
ms.topic: overview
5
-
ms.date: 07/30/2024
5
+
ms.date: 10/01/2024
6
6
ms.custom:
7
7
ms.service: azure-backup
8
8
author: AbhishekMallick-MS
@@ -39,6 +39,7 @@ While private endpoints are enabled for the vault, they're used for backup and r
39
39
| Backup of workloads in Azure VM (SQL, SAP HANA), Backup using MARS Agent, DPM server. | Use of private endpoints is recommended to allow backup and restore without needing to add to an allowlist any IPs/FQDNs for Azure Backup or Azure Storage from your virtual networks. In that scenario, ensure that VMs that host SQL databases can reach Microsoft Entra IPs or FQDNs. |
40
40
|**Azure VM backup**| VM backup doesn't require you to allow access to any IPs or FQDNs. So, it doesn't require private endpoints for backup and restore of disks. <br><br> However, file recovery from a vault containing private endpoints would be restricted to virtual networks that contain a private endpoint for the vault. <br><br> When using ACL’ed unmanaged disks, ensure the storage account containing the disks allows access to **trusted Microsoft services** if it's ACL’ed. |
41
41
|**Azure Files backup**| Azure Files backups are stored in the local storage account. So it doesn't require private endpoints for backup and restore. |
42
+
|**Changed Vnet for Private endpoint in the Vault and Virtual Machine**| Stop backup protection and configure backup protection in a new vault with Private Endpoints enabled. |
42
43
43
44
>[!NOTE]
44
45
>Private endpoints are supported with only DPM server 2022, MABS v4, and later.
| SAP_INTERNAL_HANA_SUPPORT || Accesses a few private tables. <br><br> Required only for single container database (SDC) and multiple container database (MDC) versions earlier than HANA 2.0 SPS04 Rev 46. It isn't required for HANA 2.0 SPS04 Rev 46 versions and later, because we receive the required information from public tables now after the fix from HANA team. |
49
49
50
+
**Example**:
51
+
52
+
```HDBSQL
53
+
- hdbsql -t -U SYSTEMKEY CREATE USER USRBKP PASSWORD AzureBackup01 NO FORCE_FIRST_PASSWORD_CHANGE
- hdbsql -t -U SYSTEMKEY 'ALTER USER USRBKP ACTIVATE USER NOW'
57
+
- hdbsql -t -U SYSTEMKEY 'GRANT DATABASE ADMIN TO USRBKP'
58
+
- hdbsql -t -U SYSTEMKEY 'GRANT CATALOG READ TO USRBKP'
59
+
```
60
+
50
61
1. Add the key to *hdbuserstore* for your custom backup user that enables the HANA backup plug-in to manage all operations (database queries, restore operations, configuring, and running backup).
51
62
63
+
**Example**:
64
+
65
+
```HDBSQL
66
+
- hdbuserstore set BKPKEY localhost:39013 USRBKP AzureBackup01
67
+
```
68
+
52
69
1. Pass the custom backup user key to the script as a parameter:
53
70
54
71
```HDBSQL
@@ -83,13 +100,26 @@ When a failover occurs, the users are replicated to the new primary, but *hdbuse
83
100
84
101
You must provide the same HSR ID on both VMs/nodes. This ID must be unique within a vault. It should be an alphanumeric value containing at least one digit, one lowercase letter, and one uppercase character, and it should contain from 6 to 35 characters.
1. While you're running the preregistration script on the secondary node, you must specify the SDC/MDC port as input. This is because SQL commands to identify the SDC/MDC setup can't be run on the secondary node. You must provide the port number as a parameter, as shown here:
1. If your HANA setup uses private endpoints, run the preregistration script with the `-sn` or `--skip-network-checks` parameter. Ater the preregistration script has run successfully, proceed to the next steps.
94
124
95
125
1. Run the SAP HANA backup configuration script (preregistration script) in the VMs where HANA is installed as the root user. This script sets up the HANA system for backup. For more information about the script actions, see the [What the preregistration script does](tutorial-backup-sap-hana-db.md#what-the-pre-registration-script-does) section.
Copy file name to clipboardExpand all lines: articles/backup/sap-hana-faq-backup-azure-vm.yml
+14Lines changed: 14 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -171,6 +171,20 @@ sections:
171
171
answer: |
172
172
During the backup operation, the *backup job* connects to three Service Endpoints - `AzureBackup`, `AzureStorage`, and `Microsoft Entra ID. In this scenario, we recommend you to configure the Service Endpoint to `AzureStorage`, which helps to send the traffic from the Virtual Network to the Storage directly. For Azure Backup and Microsoft Entra ID, you can configure UDR over service tags so that the traffic travels to backbone network instead of on-premises.
173
173
174
+
- question: |
175
+
Why West US region node is showing under East US region Recovery Services vault?
176
+
answer: |
177
+
The Recovery Services vault shows all the nodes that are part of the SAP HANA System Replication. All the nodes are listed here as per the `hdbnsutil` output. However as per the expected behavior, only configured node in this vault is registered.
178
+
179
+
- question: |
180
+
When a file starting with "hdbbackint" under "/var/tmp generated" and how it's used?
181
+
answer: |
182
+
When you trigger the backup job using the `hdbbackint` Backint agent, it writes information to the `/var/tmp` directory. For example, if an error occurs during the backup process, the error message is written to a file in the `/var/tmp` directory. The file name gets created in the format `hdbbackint_<SID>.<random_string>`, where `<SID>` is the System ID of the SAP HANA instance and `<random_string>` is a randomly generated string.
183
+
184
+
- question: |
185
+
What happens if I delete the hdbbackint file in the /var/tmp?
186
+
answer: |
187
+
The backup process is not affected if you delete the `hdbbackint` file in the `/var/tmp` directory. However, it might remove any error messages that were written to the file during the backup process.
Copy file name to clipboardExpand all lines: articles/backup/tutorial-sap-hana-restore-cli.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Tutorial - SAP HANA DB restore on Azure using CLI
3
3
description: In this tutorial, learn how to restore SAP HANA databases running on an Azure VM from an Azure Backup Recovery Services vault using Azure CLI.
4
4
ms.topic: tutorial
5
-
ms.date: 07/30/2024
5
+
ms.date: 10/01/2024
6
6
ms.custom: devx-track-azurecli,engagement-fy24
7
7
ms.service: azure-backup
8
8
author: AbhishekMallick-MS
@@ -92,8 +92,8 @@ arvind@Azure:~$
92
92
93
93
Ensure that the following prerequisites are met before restoring a database:
94
94
95
-
* You can restore the database only to an SAP HANA instance that's in the same region
96
-
* The target instance must be registered with the same vault as the source
95
+
* You can restore the database only to an SAP HANA instance that's in the same region.
96
+
* The target instance must be registered with the same vault as the source or another vault in the same region.
97
97
* Azure Backup can't identify two different SAP HANA instances on the same VM. Therefore, restoring data from one instance to another on the same VM isn't possible.
title: What are preview features in Azure HDInsight?
3
+
description: Learn what preview features are and how to identify them in Azure HDInsight.
4
+
ms.service: azure-hdinsight
5
+
ms.date: 07/10/2024
6
+
ms.topic: conceptual
7
+
---
8
+
9
+
# What are preview features?
10
+
11
+
This article describes what preview features are, what limitations apply to them, and how to identify them.
12
+
13
+
Preview features are features that aren't complete but are made available on a **preview** basis so that customers can get early access and provide feedback.
14
+
15
+
Preview features come with some disclaimers. Preview features:
16
+
17
+
* Are subject to separate [Supplemental Terms of Use](https://www.microsoft.com/business-applications/legal/supp-powerplatform-preview/).
18
+
19
+
* Aren't meant for production use.
20
+
21
+
* Aren't supported by Microsoft Support for production use. Microsoft Support is, however, eager to get your feedback on the preview functionality, and might provide best-effort support in certain cases.
22
+
23
+
* May have limited or restricted functionality.
24
+
25
+
* May not be available in all geographic areas.
26
+
27
+
## How to identify a preview feature
28
+
29
+
These features have a **Preview** label in the documentation.
Copy file name to clipboardExpand all lines: articles/private-link/rbac-permissions.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,16 +30,16 @@ Microsoft.Network and the specific resource provider you are deploying, for exam
30
30
31
31
## Private endpoint
32
32
33
-
This section lists the granular permissions required to deploy a private endpoint.
33
+
This section lists the granular permissions required to deploy a private endpoint, manage [private endpoint subnet policies](../private-link/disable-private-endpoint-network-policy.md), and deploy dependent resources
34
34
35
35
| Action | Description |
36
36
| --------- | ------------- |
37
37
| Microsoft.Resources/deployments/*| Create and manage a deployment |
38
38
| Microsoft.Resources/subscriptions/resourcegroups/resources/read | Read the resources for the resource group |
39
39
| Microsoft.Network/virtualNetworks/read | Read the virtual network definition |
40
40
| Microsoft.Network/virtualNetworks/subnets/read | Read a virtual network subnet definition |
41
-
| Microsoft.Network/virtualNetworks/subnets/write | Creates a virtual network subnet or updates an existing virtual network subnet|
42
-
| Microsoft.Network/virtualNetworks/subnets/join/action |Joins a virtual network |
41
+
| Microsoft.Network/virtualNetworks/subnets/write | Creates a virtual network subnet or updates an existing virtual network subnet. <br/> *Not explicitly needed to deploy a private endpoint, but necessary for managing private endpoint subnet policies*|
42
+
| Microsoft.Network/virtualNetworks/subnets/join/action |Allow a private endpoint to join a virtual network|
43
43
| Microsoft.Network/privateEndpoints/read | Read a private endpoint resource |
44
44
| Microsoft.Network/privateEndpoints/write | Creates a new private endpoint, or updates an existing private endpoint |
45
45
| Microsoft.Network/locations/availablePrivateEndpointTypes/read | Read available private endpoint resources |
@@ -78,22 +78,22 @@ Here is the JSON format of the above permissions. Input your own roleName, descr
78
78
79
79
## Private link service
80
80
81
-
This section lists the granular permissions required to deploy a private link service.
81
+
This section lists the granular permissions required to deploy a private link service, manage [private link service subnet policies](../private-link/disable-private-link-service-network-policy.md), and deploy dependent resources
82
82
83
83
| Action | Description |
84
84
| --------- | ------------- |
85
85
| Microsoft.Resources/deployments/*| Create and manage a deployment |
86
86
| Microsoft.Resources/subscriptions/resourcegroups/resources/read | Read the resources for the resource group |
87
87
| Microsoft.Network/virtualNetworks/read | Read the virtual network definition |
88
88
| Microsoft.Network/virtualNetworks/subnets/read | Read a virtual network subnet definition |
89
-
| Microsoft.Network/virtualNetworks/subnets/write | Creates a virtual network subnet or updates an existing virtual network subnet|
90
-
| Microsoft.Network/privateLinkServices/read | Read a private link service resource|
91
-
| Microsoft.Network/privateLinkServices/write | Creates a new private link service, or updates an existing private link service|
89
+
| Microsoft.Network/virtualNetworks/subnets/write | Creates a virtual network subnet or updates an existing virtual network subnet. <br/> *Not explicitly needed to deploy a private link service, but necessary for managing private link subnet policies*|
90
+
| Microsoft.Network/privateLinkServices/read | Read a private link service resource|
91
+
| Microsoft.Network/privateLinkServices/write | Creates a new private link service, or updates an existing private link service|
92
92
| Microsoft.Network/privateLinkServices/privateEndpointConnections/read | Read a private endpoint connection definition |
93
93
| Microsoft.Network/privateLinkServices/privateEndpointConnections/write | Creates a new private endpoint connection, or updates an existing private endpoint connection|
94
-
| Microsoft.Network/networkSecurityGroups/join/action | Joins a network security group |
95
-
| Microsoft.Network/loadBalancers/read | Read a load balancer definition |
96
-
| Microsoft.Network/loadBalancers/write | Creates a load balancer or updates an existing load balancer |
94
+
| Microsoft.Network/networkSecurityGroups/join/action | Joins a network security group |
95
+
| Microsoft.Network/loadBalancers/read | Read a load balancer definition |
96
+
| Microsoft.Network/loadBalancers/write | Creates a load balancer or updates an existing load balancer |
97
97
98
98
```JSON
99
99
{
@@ -136,7 +136,7 @@ Typically, a network administrator creates a private endpoint. Depending on your
0 commit comments