> Software > Protect > SaaS > DevOps Solutions > Azure DevOps

Configure an Azure DevOps App

Create an Azure DevOps app that will contain the projects and repositories you want to manage and back up.

Before You Begin

If you are an MSP and you want your tenant administrators to create the DevOps app, see Infra Admin.

Permissions Required for Express Configuration

SaaS Only

This section applies only to Commvault SaaS deployments. Express configuration for Azure DevOps is available exclusively for SaaS.

Requirement

Details

User Access Level

Basic or higher

User Group

Project Collection Administrators group

See Azure DevOps access levels for more information.

Azure DevOps OAuth Permissions

- vso.profile - Sign in and read user profile

- vso.graph_manage - Add app to Project Collection Administrators group

- vso.memberentitlementmanagement_write - Add app to organization with Basic + Test Plans access

Microsoft Graph OAuth Permissions

- User.Read - Standard Microsoft sign-in permission

Post-Authorization Setup

The Commvault multitenant app is automatically added to your organization with Basic + Test Plans access and included in the Project Collection Administrators group.

Organizational Consent

Checking "Consent on behalf of your organization" grants permissions to all users without individual prompts. Managed through Microsoft Entra ID.
  1. From the Command Center navigation pane, go to Service catalog.

Choose Azure DevOps

  1. On the DevOps tile, click Configure.

  2. Select Azure DevOps.

    The Configure Azure DevOps App wizard appears.

Enter a Descriptive Name for the Application

  1. On the Connection Settings page, in the App name box, enter a descriptive name for the Azure DevOps application.

Choose Authentication Mechanism

  1. Complete the authentication steps:

    Express Configuration

    1. Select Express Configuration.

    Note

    The user authorizing the app must have Basic access level or higher and belong to the Project Collection Administrators group. Specific OAuth permissions will be requested during sign-in.

    1. Click Sign in with Microsoft.

      A Microsoft window displays all the permissions that are required to access the Azure app.

      If the browser pop-up blocker blocks the Microsoft window, allow access to the Microsoft window.

    2. At the bottom of the Microsoft window, click Accept.

    3. After the Azure app configuration is complete, on the Configure Azure app box, click Close.

    4. From the Organization list, select the organizations on which you want to configure the Commvault Cloud MultiTenant app, and then click Configure.

    Custom Configuration

    1. Select Custom Configuration.

    2. Register the Azure App for Azure DevOps in the Azure Portal.

    3. For Credentials, create new OAuth credentials:

      1. Click the add button.

        The Add credential dialog box appears.

      2. In Credential name, enter a descriptive name for the credentials.

      3. In Application ID, enter the Azure application ID.

      4. In Tenant ID, enter the Azure tenant ID (this is the same as the Directory ID in the Azure portal).

      5. In Application secret, enter the Azure application secret.

      6. From Environment, select the Azure cloud environment where your application or service is hosted.

      7. To enter the authentication endpoint details, move the Show endpoints toggle key to the right, and then provide the authentication, storage endpoint, and management endpoints.

      8. In Description, enter a description of the credentials.

      9. Click Save.

    4. Click Next.

    Custom Configuration

    1. Select Custom Configuration.

    2. Select one of the following authentication methods:

      • To use PAT for authentication, move the Use Personal Access Token toggle key to the right, and then select an existing PAT credential or create a new PAT credential.

      • To use OAuth for authentication, create new OAuth credentials:

        1. Register the Azure App for Azure DevOps in the Azure Portal.

        2. Click the add button.

          The Add credential dialog box appears.

        3. In Credential name, enter a descriptive name for the credentials.

        4. In Application ID, enter the Azure application ID.

        5. In Tenant ID, enter the Azure tenant ID (this is the same as the Directory ID in the Azure portal).

        6. In Application secret, enter the Azure application secret.

        7. From Environment, select the Azure cloud environment where your application or service is hosted.

        8. To enter the authentication endpoint details, move the Show endpoints toggle key to the right, and then provide the authentication, storage endpoint, and management endpoints.

        9. In Description, enter a description of the credentials.

        10. Click Save.

    3. Click Next.

    Note

    PAT (Personal Access Token) authentication is only available for Commvault software deployments.

Access Node Selection

  1. Choose one of the following options for access nodes:

    • Select the region (Preferred): Select the region where the Azure DevOps data is hosted, and then click Next.

    • Select access nodes: Select your own configured access nodes for performing backups.

      Note

      If the MSP has configured a workload resource pool in a single region and no access node is configured by the tenant, this step will not appear. Access nodes configured in the workload resource pool are selected automatically.

Plan Selection

  1. Select a backup plan:

    Select an existing bundled storage plan or create a new bundled storage plan to associate with the Azure DevOps app.

    Note

    • When creating a new plan, if storage resources are configured in the selected region, the region is automatically populated.
    • If storage resources are not configured in the selected region, select the region manually. In this case, the MediaAgent you provide will be used as the storage MediaAgent.

    Select an existing backup plan or create a new backup plan to associate with the Azure DevOps app.

Choose Backup Content

  1. Select the backup content you want to protect, such as Boards, Repos, Pipelines, Test Plans, and Artifacts.

Submit

  1. Review your selections, and then click Submit to complete the configuration.
×

Loading...