> Software > Protect > Cloud discovery > Azure

Connect your Azure account and discover resources

Add your Azure account and authorize Commvault to discover resources and assess backup costs.

Note

The Commvault software runs the discovery process on the configured accounts every 24 hours. On-demand discovery runs can be performed.

Step 1: Create a cloud connection

Authorize the Commvault multi-tenant app for simplified setup.

  1. From the Command Center navigation pane, go to Protect > Cloud Discovery > Azure.

  2. Click Add connection.

  3. For Cloud connection name, enter a name.

  4. Click Sign in with Microsoft.

  5. Enter tenant user credentials.

    Note

    The user account must have:

    • The Global Administrator role.

    • The Access management for Azure Resources permission.

  6. Click Accept, and then click Close.

  7. Click Next.

Create or reuse an existing Azure app registration to configure your own Azure application.

Permissions required

  • Assign the Reader and Backup Reader roles to an Azure subscription that you want to use for discovery.

  • To run backups of the discovered resources in your Azure account, you must configure and use the Azure app and credentials that have the custom roles that Commvault provides.

  1. Select Custom configuration.

  2. Select existing credentials, or click the add button to create new credentials.

    To create credentials, do the following:

    1. Enter a name for the credential.

    2. In the Application ID box, enter the application ID for the tenant.

    3. In the Tenant ID box, enter the tenant ID for the Azure account.

    4. In the Application secret box, enter the secret key for the application.

    5. In the Environment list, select the Azure environment.

    6. Enable the Show endpoints option to modify the Authentication endpoint, Storage endpoint, and Management endpoint.

    7. Enter a description for the credentials, and then click Save.

Step 2: Choose subscriptions to discover resources

Select either of the following options based on your configuration type.

Configuration type

Option

Discovery

Backup support

Notes

Express

Connect all subscriptions

Yes

Yes

Automatically includes future subscriptions; discovery only.

To backup resources associated with newly discovered subscriptions, you must assign the custom roles that Commvault provides.

Connect specific subscriptions

Yes

Yes

Allows discovery and backups for selected subscriptions

Custom

Connect all subscriptions

Yes*

Yes*

Both discovery and backup supported. Automatically includes new subscriptions if required permissions are assigned to the new subscription

Connect specific subscriptions

Yes*

Yes*

Both discovery and backup supported

*The backups of the discovered resources are supported only if the required custom roles are assigned to the Azure app.

Step 3: Review connection details

Review the cloud connection summary, and then click Submit.

×

Loading...