Use the Express configuration to Create an Azure App for Microsoft Azure for PostgreSQL

To back up Microsoft Azure for PostgreSQL database resources, you must authorize the Commvault MultiTenant app in your Azure tenant. The user who signs in must have sufficient permissions to authorize the MultiTenant app and must be assigned the required Azure roles for the database resources that you want to protect.

Before You Begin

• If you are an MSP and you want your tenant administrators to create the Azure app, see MSP configuration for Azure.

• To back up the Azure database accounts, you must authorize the Commvault Cloud MultiTenant app on your tenant. The user signing in must have permission to authorize the MultiTenant app and must be a member of Project Collection Administrators (PCA) group for the Azure database accounts to be backed up.

  To check the permissions to authorize the app, do the following:

  1. Login to Microsoft Entra admin center.

  2. Browse to Identity > Applications > Enterprise applications > Consent and permissions > User consent settings.

  3. Ensure the user signing in has the necessary permissions to authorize the Commvault Cloud MultiTenant app. If not, contact your administrator to grant the required permissions.

  4. Login to Azure.

  5. Browse to Organization Settings > General > Users.

  6. Ensure the user signing in is part of the users list. If not, add the user to the list.

  7. Browse to Organization Settings > Security > Permissions > Project Collection Administrators > Members.

  8. Ensure the user signing in is a member of the group. If not, add the user to the group.

Procedure

1. On the Authorize Multi Tenant App page, choose one of the following:

   • Use existing tenant

     1. From Azure tenant list, select an azure tenant.

   • Authorize new tenant:

     1. Click Sign in with Microsoft, and then authorize the new tenant.

2. Click Next.

3. On the Authorized Workload App page, click Sign in with Microsoft.

   A Microsoft window displays all the permissions that are required to access the Azure app.

   If the browser pop-up blocker blocks the Microsoft window, allow access to the Microsoft window.

4. On the Microsoft permission requested dialog box, click Accept.

   A validation message is displayed on the screen Workload app is authorized.

5. Click Next.

6. On the Assign Role page, from the Subscriptions list, select an Azure subscription.

   A role is created in your tenant environment and associated with the selected subscription.

7. Click Next.

8. On the Cloud Account page, in the Name box, enter the cloud account name, and then click Next.

9. On the Summary page, click Create new instance.

   The Configure Permissions page appears.