Add the Azure Data Lake Storage Gen2 Object Storage Repository with an IAM AD Application

To add the Azure Data Lake Gen2 object storage repository using non-Azure virtual machines (VM) as access nodes, create an Azure Active Directory (AD) application, and then assign the storage blob data owner role to the application. Then, use the IAM AD role assignment type of authentication to add an object storage repository.

Assign the Storage Blob Data Owner Role to the AD Application

1. On the Azure portal, create an Azure AD application.

2. Add the storage blob data owner role to the Azure AD application.

3. Generate and save a client secret for the Azure AD application.

4. Record the application ID and the tenant ID of the application that you created.

Add the Repository

1. From the navigation pane, go to Protect > Object storage.

   The Object storage page appears.

2. In the upper-right corner of the page, click Add object storage.

   The Add object storage dialog box appears.

3. Click Azure Data Lake Storage Gen2.

   The Configure Azure Data Lake Storage Gen2 wizard appears.

4. On the Plan tab of the wizard, select the backup plan that you want to use for the object storage repository, and then click Next.

5. On the Access Node tab of the wizard, select one or more access nodes or the server group where the Cloud Apps package is installed, and then click Next.

   Note

   • The access nodes must be of similar operating system type.

   • All servers in the server group must be reachable through network routes.

6. On the Add object storage tab of the wizard, complete the following steps:

   1. In theObject storage name box, enter a name for the repository.

   2. In the Host URL box, enter the Azure Data Lake Storage Gen2 service account URL.

      For example, enter dfs.core.windows.net.

   3. From the Authentication list, select IAM AD application.

   4. Do one of the following:

      • From theCredentials dialog box, select the credentials that you are going to use, and then click Next.

      • To add credentials to the Credential Manager, click the plus button (+).

        TheAdd Credential dialog box appears.

      • Enter the following information:

      • Credential name: Enter a name for the credentials that you are creating.

      • Tenant ID: Enter the tenant ID of the Azure AD application.

      • Application ID: Enter the application ID of the Azure AD application.

      • Application secret: Enter the application secret of the Azure AD application.

      • Description: Enter a description for the credentials.

      • ClickSave.

   5. In the Account name box, enter the name of the Azure Data Lake Storage Gen2 service account.

7. On the Backup Content tab of the wizard, complete the following steps:

   1. Click Add, and do one of the following:

      • To enter a custom path, click Custom path, and then enter the path for the content.

      • To browse for content, click Browse, and then select the content.

   2. To exclude some of the content you selected, move the Specify exclusion toggle key to the right, and then add the exclusion.

   3. Click Next.

8. On the Summary tab of the wizard, review the options, and then clickFinish.