To back up an Azure Blob Storage account using non-Azure virtual machines (VMs) as access nodes, create an Azure Active Directory (AD) application, and then assign the storage blob data owner role to that AD application at the Azure storage account level. Then, use the IAM AD role assignment type of authentication to add an object storage repository.
Assign the Storage Blob Data Owner Role to the Azure AD Application
-
On the Azure portal, create an Azure AD application.
-
Add the storage blob owner role to the application.
-
Generate and save a client secret for the application.
-
Record the application ID and the tenant ID of the application that you created.
Procedure
-
From the navigation pane, go to Protect > Object storage.
The Object storage page appears.
-
In the upper-right area of the page, click Add object storage.
The Add object storage dialog box appears.
-
Click Azure Blob Storage.
The Add Azure Blob Storage dialog box appears.
-
In the Object storage name box, enter a name for the repository.
-
In the Host URL box, enter the Azure Blob Storage service account URL.
For example, you can enter blob.core.windows.net.
-
From the Authentication list, select IAM AD application.
-
For Credentials, select or create credentials.
-
From the Credentials dialog box, select the credentials to use for authentication.
-
To add credentials to the Credential Manager, click the plus button (+).
The Add Credential dialog box appears.
-
Enter the following information:
-
Credential name: Enter a name for the credentials that you are creating.
-
Tenant ID: Enter the tenant ID of the Azure AD application.
-
Application ID: Enter the application ID of the Azure AD application.
-
Application secret: Enter the client secret of the Azure AD application.
-
Environment: Select an Azure environment.
-
Click Save.
-
-
-
Enter the following information:
-
Access node: Select the access node where the Cloud Apps package is installed.
-
Plan: Select the backup plan to use for the object storage repository.
-
-
Click Save.