In a service provider environment, Managed Service Provider (MSP) administrators and tenant administrators can configure and manage Auto Recovery based on their assigned roles and permissions. MSP administrators can also provide Azure-hosted Auto Recovery targets to child companies.
Replication Group Permissions
In a service provider environment, the following users can create a replication group:
-
MSP administrators
-
Tenant administrators
-
Users with the Client Admins role for the source hypervisor, or a custom role with the same permissions as the Client Admins role.
To review the permissions for the Client Admins role, from the navigation pane, go to Manage > Account > Security, click the Roles tile, and then click the Client Admins role.
Permissions to view, edit, and delete a replication group depend on the user who created the replication group:
-
If an MSP administrator creates the replication group, the administrator and peer MSP administrators can manage the replication group.
-
If a tenant administrator creates the replication group, the administrator, peer tenant administrators, and all MSP administrators can manage the replication group.
-
If a tenant user creates the replication group, the user, all tenant administrators, and all MSP administrators can manage the replication group.
MSP-hosted Auto Recovery Targets
MSPs can provide Azure-hosted Auto Recovery targets to child companies. This setup allows tenant administrators to protect their workloads during a potential disaster or planned downtime without manually configuring the underlying recovery resources.
To use an MSP-hosted Auto Recovery target, contact your MSP. The MSP administrator must configure the hosted target for the child company.
To configure a hosted target, see Configure a Hosted Auto Recovery Target.