You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> Once a storage account is configured for blobs backup, a few capabilities are affected, such as change feed and delete lock. [Learn more](blob-backup-configure-manage.md#effects-on-backed-up-storage-accounts).
@@ -16,9 +16,9 @@ Azure Backup allows you to configure operational and vaulted backups to protect
16
16
17
17
# [Operational backup](#tab/operational-backup)
18
18
19
-
- Operational backup of blobs is a local backup solution that maintains data for a specified duration in the source storage account itself. This solution doesn't maintain an additional copy of data in the vault. This solution allows you to retain your data for restore for up to 360 days. Long retention durations may, however, lead to longer time taken during the restore operation.
20
-
- The solution can be used to perform restores to the source storage account only and may result in data being overwritten.
21
-
- If you delete a container from the storage account by calling the *Delete Container operation*, that container can't be restored with a restore operation. Rather than deleting an entire container, delete individual blobs if you may want to restore them later. Also, Microsoft recommends enabling soft delete for containers, in addition to operational backup, to protect against accidental deletion of containers.
19
+
- Operational backup of blobs is a local backup solution that maintains data for a specified duration in the source storage account itself. This solution doesn't maintain an additional copy of data in the vault. This solution allows you to retain your data for restore for up to 360 days. Long retention durations can, however, lead to longer time taken during the restore operation.
20
+
- The solution can be used to perform restores to the source storage account only and can result in data being overwritten.
21
+
- If you delete a container from the storage account by calling the *Delete Container operation*, that container can't be restored with a restore operation. Rather than deleting an entire container, delete individual blobs if you want to restore them later. Also, Microsoft recommends enabling soft delete for containers, in addition to operational backup, to protect against accidental deletion of containers.
22
22
- Ensure that the **Microsoft.DataProtection** provider is registered for your subscription.
23
23
24
24
For more information about the supported scenarios, limitations, and availability, see the [support matrix](blob-backup-support-matrix.md).
@@ -53,12 +53,12 @@ To assign the required role for storage accounts that you need to protect, follo
53
53
>[!NOTE]
54
54
>You can also assign the roles to the vault at the Subscription or Resource Group levels according to your convenience.
55
55
56
-
1. In the storage account that needs to be protected, go to the **Access Control (IAM)** tab on the left navigation pane.
56
+
1. In the storage account that needs to be protected, go to the **Access Control (IAM)** tab on the left navigation blade.
57
57
1. Select **Add role assignments** to assign the required role.
58
58
59
59

60
60
61
-
1. In the Add role assignment pane:
61
+
1. In the Add role assignment blade:
62
62
63
63
1. Under **Role**, choose **Storage Account Backup Contributor**.
64
64
1. Under **Assign access to**, choose **User, group or service principal**.
@@ -70,107 +70,17 @@ To assign the required role for storage accounts that you need to protect, follo
70
70
>[!NOTE]
71
71
>The role assignment might take up to 30 minutes to take effect.
72
72
73
-
## Create a backup policy
74
73
75
-
A backuppolicy defines the schedule and frequency of the recovery points creation, and its retention duration in the Backup vault. You can use a single backup policy for your vaulted backup, operational backup, or both. You can use the same backuppolicy to configure backup for multiple storage accounts to a vault.
1. Go to **Backup center**, and then select **+ Policy**. This takes you to the create policy experience.
80
-
81
-
:::image type="content" source="./media/blob-backup-configure-manage/add-policy-inline.png" alt-text="Screenshot shows how to initiate adding backup policy for vaulted blob backup." lightbox="./media/blob-backup-configure-manage/add-policy-expanded.png":::
82
-
83
-
2. Select the *data source type* as **Azure Blobs (Azure Storage)**, and then select **Continue**.
84
-
85
-
:::image type="content" source="./media/blob-backup-configure-manage/datasource-type-selection-for-vaulted-blob-backup.png" alt-text="Screenshot shows how to select datasource type for vaulted blob backup.":::
86
-
87
-
3. On the **Basics** tab, enter a name for the policy and select the vault you want this policy to be associated with.
88
-
89
-
:::image type="content" source="./media/blob-backup-configure-manage/add-vaulted-backup-policy-name.png" alt-text="Screenshot shows how to add vaulted blob backup policy name.":::
90
-
91
-
You can view the details of the selected vault in this tab, and then select **continue**.
92
-
93
-
4. On the **Schedule + retention** tab, enter the *backup details* of the data store, schedule, and retention for these data stores, as applicable.
94
-
95
-
1. To use the backup policy for vaulted backups, operational backups, or both, select the corresponding checkboxes.
96
-
1. For each data store you selected, add or edit the schedule and retention settings:
97
-
-**Vaulted backups**: Choose the frequency of backups between *daily* and *weekly*, specify the schedule when the backup recovery points need to be created, and then edit the default retention rule (selecting **Edit**) or add new rules to specify the retention of recovery points using a *grandparent-parent-child* notation.
98
-
-**Operational backups**: These are continuous and don't require a schedule. Edit the default rule for operational backups to specify the required retention.
99
-
100
-
:::image type="content" source="./media/blob-backup-configure-manage/define-vaulted-backup-schedule-and-retention-inline.png" alt-text="Screenshot shows how to configure vaulted blob backup schedule and retention." lightbox="./media/blob-backup-configure-manage/define-vaulted-backup-schedule-and-retention-expanded.png":::
101
-
102
-
5. Go to **Review and create**.
103
-
6. Once the review is complete, select **Create**.
104
-
105
-
## Configure backups
106
-
107
-
You can configure backup for one or more storage accounts in an Azure region if you want them to back up to the same vault using a single backup policy.
108
-
109
-
To configure backup for storage accounts, follow these steps:
110
-
111
-
1. Go to **Backup center** > **Overview**, and then select **+ Backup**.
112
-
113
-
:::image type="content" source="./media/blob-backup-configure-manage/start-vaulted-backup.png" alt-text="Screenshot shows how to initiate vaulted blob backup.":::
114
-
115
-
2. On the **Initiate: Configure Backup** tab, choose **Azure Blobs (Azure Storage)** as the **Datasource type**.
116
-
117
-
:::image type="content" source="./media/blob-backup-configure-manage/choose-datasource-for-vaulted-backup.png" alt-text="Screenshot shows how to initiate configuring vaulted blob backup.":::
118
-
119
-
3. On the **Basics** tab, specify **Azure Blobs (Azure Storage)** as the **Datasource type**, and then select the *Backup vault* that you want to associate with your storage accounts.
120
-
121
-
You can view details of the selected vault on this tab, and then select **Next**.
122
-
123
-
:::image type="content" source="./media/blob-backup-configure-manage/select-datasource-type-for-vaulted-backup.png" alt-text="Screenshot shows how to select datasource type to initiate vaulted blob backup.":::
124
-
125
-
4. Select the *backup policy* that you want to use for retention.
126
-
127
-
You can view the details of the selected policy. You can also create a new backup policy, if needed. Once done, select **Next**.
128
-
129
-
:::image type="content" source="./media/blob-backup-configure-manage/select-policy-for-vaulted-backup.png" alt-text="Screenshot shows how to select policy for vaulted blob backup.":::
130
-
131
-
5. On the **Datasources** tab, select the *storage accounts* you want to back up.
132
-
133
-
:::image type="content" source="./media/blob-backup-configure-manage/select-storage-account-for-vaulted-backup.png" alt-text="Screenshot shows how to select storage account for vaulted blob backup." lightbox="./media/blob-backup-configure-manage/select-storage-account-for-vaulted-backup.png":::
134
-
135
-
You can select multiple storage accounts in the region to back up using the selected policy. Search or filter the storage accounts, if required.
136
-
137
-
If you've chosen the vaulted backup policy in step 4, you can also select specific containers to backup. Click "Change" under the "Selected containers" column. In the context blade, choose "browse containers to backup" and unselect the ones you don't want to backup.
138
-
139
-
6. When you select the storage accounts and containers to protect, Azure Backup performs the following validations to ensure all prerequisites are met. The **Backup readiness** column shows if the Backup vault has enough permissions to configure backups for each storage account.
140
-
141
-
1. Validates that the Backup vault has the required permissions to configure backup (the vault has the **Storage account backup contributor** role on all the selected storage accounts. If validation shows errors, then the selected storage accounts don't have **Storage account backup contributor** role. You can assign the required role, based on your current permissions. The error message helps you understand if you have the required permissions, and take the appropriate action:
142
-
143
-
-**Role assignment not done**: This indicates that you (the user) have permissions to assign the **Storage account backup contributor** role and the other required roles for the storage account to the vault.
144
-
145
-
Select the roles, and then select **Assign missing roles** on the toolbar to automatically assign the required role to the Backup vault, and trigger an autorevalidation.
146
-
147
-
The role propagation may take some time (up to 10 minutes) causing the revalidation to fail. In this scenario, you need to wait for a few minutes and select **Revalidate** to retry validation.
148
-
149
-
-**Insufficient permissions for role assignment**: This indicates that the vault doesn't have the required role to configure backups, and you (the user) don't have enough permissions to assign the required role. To make the role assignment easier, Azure Backup allows you to download the role assignment template, which you can share with users with permissions to assign roles for storage accounts.
150
-
151
-
To do this, select the storage accounts, and then select **Download role assignment template** to download the template. Once the role assignments are complete, select **Revalidate** to validate the permissions again, and then configure backup.
152
-
153
-
:::image type="content" source="./media/blob-backup-configure-manage/vaulted-backup-role-assignment-success.png" alt-text="Screenshot shows that the role assignment is successful.":::
154
-
155
-
>[!Note]
156
-
>The template contains details for selected storage accounts only. So, if there are multiple users that need to assign roles for different storage accounts, you can select and download different templates accordingly.
157
-
158
-
1. In case of vaulted backups, validates that the number of containers to be backed up is less than *100*. By default, all containers are selected; however, you can exclude containers that shouldn't be backed up. If your storage account has *>100* containers, you must exclude containers to reduce the count to *100 or below*.
159
-
160
-
>[!Note]
161
-
>In case of vaulted backups, the storage accounts to be backed up must contain at least *1 container*. If the selected storage account doesn't contain any containers or if no containers are selected, you may get an error while configuring backups.
162
-
163
-
7. Once validation succeeds, open the **Review and configure** tab.
164
-
165
-
8. Review the details on the **Review + configure** tab and select **Next** to initiate the *configure backup* operation.
166
-
167
-
You'll receive notifications about the status of configuring protection and its completion.
### Using Data protection settings of the storage account to configure backup
170
80
171
81
You can configure backup for blobs in a storage account directly from the ‘Data Protection’ settings of the storage account.
172
82
173
-
1. Go to the storage account for which you want to configure backup for blobs, and then go to **Data Protection** in left pane (under **Data management**).
83
+
1. Go to the storage account for which you want to configure backup for blobs, and then go to **Data Protection** in left blade (under **Data management**).
174
84
175
85
1. In the available data protection options, the first one allows you to enable operational backup using Azure Backup.
176
86
@@ -188,7 +98,7 @@ You can configure backup for blobs in a storage account directly from the ‘Dat
188
98

189
99
190
100
191
-
1. On selecting **Manage identity**, brings you to the Identity pane of the storage account.
101
+
1. On selecting **Manage identity**, brings you to the Identity blade of the storage account.
192
102
193
103
1. Select **Add role assignment** to initiate the role assignment.
194
104
@@ -208,13 +118,13 @@ You can configure backup for blobs in a storage account directly from the ‘Dat
208
118
209
119

210
120
211
-
1. Select the cancel icon (**x**) on the top right corner to return to the **Data protection**pane of the storage account.<br><br>Once back, continue configuring backup.
121
+
1. Select the cancel icon (**x**) on the top right corner to return to the **Data protection**blade of the storage account.<br><br>Once back, continue configuring backup.
212
122
213
123
## Effects on backed-up storage accounts
214
124
215
125
# [Vaulted backup](#tab/vaulted-backup)
216
126
217
-
- In storage accounts (for which you've configured vaulted backups), the object replication rules get created under the **Object replication** item in the left pane.
127
+
- In storage accounts (for which you've configured vaulted backups), the object replication rules get created under the **Object replication** item in the left blade.
218
128
- Object replication requires versioning and change-feed capabilities. So, Azure Backup service enables these features on the source storage account.
219
129
220
130
# [Operational backup](#tab/operational-backup)
@@ -242,7 +152,7 @@ Once backup is configured, changes taking place on block blobs in the storage ac
242
152
243
153
## Manage backups
244
154
245
-
You can use Backup Center as your single pane of glass for managing all your backups. Regarding backup for Azure Blobs, you can use Backup Center to do the following:
155
+
You can use Backup Center as your single blade of glass for managing all your backups. Regarding backup for Azure Blobs, you can use Backup Center to do the following:
246
156
247
157
- As we've seen above, you can use it for creating Backup vaults and policies. You can also view all vaults and policies under the selected subscriptions.
248
158
- Backup Center gives you an easy way to monitor the state of protection of protected storage accounts as well as storage accounts for which backup isn't currently configured.
@@ -274,7 +184,7 @@ To stop backup for a storage account, follow these steps:
After stopping backup, you may disable other storage data protection capabilities (enabled for configuring backups) from the data protection pane of the storage account.
187
+
After stopping backup, you can disable other storage data protection capabilities (enabled for configuring backups) from the data protection blade of the storage account.
0 commit comments