M365 SecureStore - Setup M365 Self-Service Portal Authentication

The Veeam Backup for Microsoft 365 Self-Service Portal requires the registration of an 'Entra ID' application in your organisation.

At the bottom of this page is a script that you will need to be run from a PowerShell session that is connected to your Azure tenancy with Global Admin permissions.

Direct download link to the script:
https://support.vgrid.nz/hc/en-us/article_attachments/14572059957519

Steps to set up Microsoft 365 Self-Service Portal authenticate

• Download the .ps1 file from the bottom of this page
• Open a PowerShell session with administrator privileges (this is required to install the Az.Accounts and Microsoft.Graph modules in next step below)

• Install required modules, run commands below and accept any prompts for permissions:

  Set-ExecutionPolicy -ExecutionPolicy RemoteSigned
  Install-Module Az.Accounts
  Install-Module Microsoft.Graph

• Run the downloaded .ps1 script

  .\Connect-VB365RestorePortal-rev1-2512.ps1

• An Entra ID login prompt should open on your screen
• The account you use to authenticate must be a Global Admin in your organisation
• You will be prompted twice to re-enter your Global Admin credentials

Output should look something like this:

PS > .\Connect-VB365RestorePortal-rev1-2512.ps1
 <your entra ID login> is now connected to Microsoft Azure
 Veeam-M365-Backup (92bc0535-6d02-410f-a47c-fc525434e4a1) has been linked your account
 Waiting to grant admin consent… (this can take up to 15 minutes)
 Waiting to grant admin consent… (this can take up to 15 minutes)
 Waiting to grant admin consent… (this can take up to 15 minutes)
 Veeam-M365-Backup (92bc0535-6d02-410f-a47c-fc525434e4a1) has been granted admin consent
 You can now login to the Service Provider's VB365 Restore Portal!
 WARNING: If you receive an error, wait 15 minutes and attempt login again.

Once completed, you should be able to login using your Entra ID credentials to our Self-service Restore Portal.

A few things to note:

• Users can be nominated as Restore Operators and this allows them the ability to do restores for multiple resources.
• Groups are a convenient way to allow you to manage this capability without having to get us to make changes.
• If you create a group of users who will be Restore Operators and then a group of resources (mailboxes, sites etc) that they can restore, we can create a mapping for this that will work in the Self-service Restore Portal. Just let us know if you want this to be set up.