M365 SecureStore - Setup M365 Self-Service Portal Authentication

The Veeam Backup for Microsoft 365 Self-Service Portal requires the registration of an 'Entra ID' application in your organisation.   Fortunately Veeam have created a script that automates this process.

At the bottom of this page is a script that you will need to be run from a PowerShell session that is connected to your Azure tenancy with Global Admin permissions.

Direct download link to the script:
https://support.vgrid.nz/hc/en-us/article_attachments/10137458546447

Steps to set up Microsoft 365 Self-Service Portal authenticate

• Download the .ps1 file from the bottom of this page
• Open a PowerShell session with administrator privileges (this is required to install the Azure AD module)
• Install required module, run command: install-module -name AzureAD, accept any prompts for permissions
• Connect to the Azure AD instance for your Microsoft 365 organisation, run command: Connect-AzureAD
• An Entra ID login prompt should open on your screen
• The account you use to authenticate must be a Global Admin in your organisation
• Once connected, run the attached .ps1 script
• You will be prompted twice to re-enter your Global Admin credentials

Output should look something like this:

PS C:\Downloads> .\Connect-VB365RestorePortal.ps1
 Installing required Azure PowerShell modules…Az.Accounts & AzureAd
 Az.Accounts module already present
 AzureAD module already present
 <your entra ID login> is now connected to Microsoft Azure
 Veeam-M365-Backup (92bc0535-6d02-410f-a47c-fc525434e4a1) has been linked your account
 Waiting to grant admin consent… (this can take up to 15 minutes)
 Veeam-M365-Backup (92bc0535-6d02-410f-a47c-fc525434e4a1) has been granted admin consent
 You can now login to the Service Provider's VB365 Restore Portal!
 WARNING: If you receive an error, wait 15 minutes and attempt login again.

Once completed, you should be able to login using your Entra ID credentials to our Self-service Restore Portal.

A few things to note:

• Users can be nominated as Restore Operators and this allows them the ability to do restores for multiple resources.
• Groups are a convenient way to allow you to manage this capability without having to get us to make changes.
• If you create a group of users who will be Restore Operators and then a group of resources (mailboxes, sites etc) that they can restore, we can create a mapping for this that will work in the Self-service Restore Portal. Just let us know if you want this to be set up.

• If you want to confirm the script origins, link:
  https://github.com/VeeamHub/powershell/blob/master/VB365-RestorePortalSetup/Connect-VB365RestorePortal.ps1