Adding a Cloud Account for Azure Data Lake Storage Gen2 Using Custom Configuration

Applies to: Commvault SaaS

The custom configuration wizard allows you to manually specify or use an existing Azure application to give the Commvault software access to the Azure storage accounts you want to back up.

Before You Begin

• Configure access to Azure resources.

• To access Azure resources using a managed identity, see Configuring a Managed Identity.

Procedure

1. To create a cloud account, click +.

   The Add cloud account dialog box appears.

2. In the Name box, enter a name for the cloud account.

3. In the Subscription ID box, enter the subscription ID.

   For managed identity, assign the Contributor role at the subscription level to the access node that will be used.

4. To enter a credential, do one of the following:

   • From the Credential list, select an Azure IAM application credential for the account.

   • Click + to create a new Azure IAM application credential and enter or select the following information:

     1. From the Credential Vault list, select the credential vault where you want to store the new credential.

     2. In the Credential name box, enter a name for the credential.

     3. In the Tenant ID box, enter the tenant ID.

     4. In the Application ID box, enter the application ID.

     5. In the Application secret box, enter the application secret.

     6. From the Environment list, select the environment.

     7. To display or modify the endpoints, move the Show endpoints toggle to the right.

        The endpoint includes the DNS name or the IP address, a colon, and the port number.

     8. Click Save.

5. Click Save.

6. To define a custom role, do the following:

   1. Log on to the public Azure portal with service administrator credentials.

   2. Use CVCloudAzureBlobADLSGen2BackupRole.json and assign it to back up Azure Data Lake Storage Gen2.

      For more information about creating a custom role, go to Custom roles for Azure resources on the Microsoft Azure documentation website.

   3. On the Access Control (IAM) tab, click Add, and then select Add role assignment.

      The Add role assignment pane appears.

   4. Specify the following:

      1. From the Role list, select the custom role that you created.

      2. From the Assign access to list, select User, group, or service principal.

      3. In the Select box, enter the application name, and then select the application.

   5. Click Save.