Before you configure backups, prepare your Microsoft Azure VM environment by reviewing authentication, infrastructure placement, and storage options.
Choose an onboarding method
| Onboarding method | Commvault SaaS | Commvault software | Use when |
|---|---|---|---|
| Express configuration | ✓ | ✗ | • You want Commvault to create Azure applications automatically and provide the fastest onboarding experience • A Microsoft Entra Global Administrator or Application Administrator can be available during onboarding to approve the Azure application creation and permission grant process |
| Custom configuration, with hosted infrastructure | ✓ | ✓ | • You want to manage Azure applications and permissions yourself without deploying your own access nodes • Your Commvault service provider has enabled resource pools |
| Custom configuration, with self-managed infrastructure | ✓ | ✓ | You want to manage your own access nodes or want to use managed identities |
Choose an authentication method
| Authentication method | Commvault SaaS | Commvault software | Use when |
|---|---|---|---|
| System-assigned managed identity | ✓ | ✓ | • Each Azure access node has its own system-assigned identity • You want Azure to manage authentication without storing credentials |
| User-assigned managed identity | ✓ | ✓ | • You want a single Azure identity that can be shared across multiple access nodes • You want more control over identity lifecycle, reuse, and permission assignment |
| Azure application and secret | ✓ | ✓ | You need explicit control over Azure permissions, or managed identities aren't available |
For Azure hypervisors, Commvault supports both system-assigned and user-assigned managed identities as secure authentication methods. A system-assigned identity is tied to a single access node, while a user-assigned managed identity can be reused across multiple access nodes and gives more centralized control over permission assignment.
Decide where backup infrastructure runs
Backup infrastructure consists of the access nodes that perform data protection operations.
| Infrastructure option | Commvault SaaS | Commvault software | Use when |
|---|---|---|---|
| Hosted infrastructure | ✓ | ✓ | You want your Commvault service provider to manage the access nodes used for data protection operations. |
| Self-managed infrastructure | ✓ | ✓ | You want to deploy and manage Azure access nodes in your own environment. You can deploy access nodes manually and automatically (scaling). |
Decide how backup storage is managed
| Storage option | Commvault SaaS | Commvault software | Use when |
|---|---|---|---|
| Bundled storage | ✓ | ✗ | You want Commvault to automatically deploy and manage backup storage |
| Self-managed storage | ✓ | ✓ | You want to select and manage your own backup storage |