# Choose level to configure virtual machine protection settings

VM protection settings in Commvault can be configured at multiple levels. Choosing the correct level helps you apply consistent protection, reduce duplication, and avoid configuration conflicts.

This page explains how settings are scoped and how to decide where to make changes.

## Configuration levels

Settings are applied at three levels:

Level | Scope | When to use
--- | --- | ---
Source platform | Applies to the entire environment or connection | When the change affects access, connectivity, or environment-wide behavior
VM group | Applies to a set of VMs | When multiple VMs need the same protection behavior
Individual VM | Applies to a single VM | When only one VM needs different behavior

## How settings are applied

Settings follow a hierarchical model:

- Source platform settings apply broadly across the environment

- VM group settings define protection behavior for groups of VMs

- Individual VM settings override group settings when needed

In most cases, configure settings at the VM group level to ensure consistency.

## General guidance

Use these principles when choosing where to configure settings:

- Use the highest level possible that meets your requirements

- Avoid configuring the same behavior in multiple places

- Use VM groups for most protection settings

- Use individual VM settings only for exceptions

If multiple VMs require the same change, apply it at the VM group level instead of configuring each VM individually.

## Types of settings

Different types of settings are typically configured at different levels:

- Connection and access settings: Configure at the source platform level

- Protection and backup behavior: Configure at the VM group level

- Exceptions and overrides: Configure at the individual VM level

For a detailed list of available settings and how they are used, see Common settings for virtual machine protection.

×

Loading...