You can complete the Office 365 guided setup using the express configuration option, which automates some configuration steps.
After you create the Azure app that is needed for the Teams app, the express configuration automatically syncs the app with Azure and authorizes the Azure app. The express configuration does not create a service account for Teams.
Verify That the Global Administrator Account Meets the Requirements
To use the express configuration option, you must have an Office 365 global administrator account that meets the following requirements:
The account must be dedicated to Teams backups.
The account must be an Office 365 mailbox licensed user with the Teams capability.
The Commvault software uses the global administrator account as follows:
Creates the Azure app that is needed for the Commvault Teams app, and registers the Azure app with Azure AD.
Adds the global administrator account to all the Teams channels as a member so that the backup process can access the data of each team. If notifications are turned on for users, users are notified that an account was added to the channel as a member.
If you do not want an authorized user account to be added as a member of the team, follow the instructions in KB article 67692.
Disable Multi-Factor Authentication for the Global Administrator Account
To use the express configuration option, if multi-factor authentication is enabled for the global administrator account, you must disable it.
For more information, see "Turn on Modern authentication for your organization" and "Turn off legacy per-user MFA" in Use Conditional Access Policies in the Microsoft documentation.
After you complete the guided setup, you will enable multi-factor authentication again.
After you configure the Teams app and you enable multi-factor authentication again, reacquire the token before running the first backup job. Otherwise backup jobs will fail.
Verify That Ports Are Open
Verify that the required ports are open.
Go to the Office 365 Guided Setup
From the navigation pane, go to Guided setup.
The Welcome page appears.
On the Protect tab, click Office 365.
The Office 365 setup appears.
Create a Server Plan That You Can Use for Teams
If you already have a server plan that you can use, you can skip this step.
On the Create server backup plan page, specify the settings for a server plan that you can use for the Teams app.
Settings | Steps |
---|---|
Plan name |
|
Backup destinations |
|
RPO |
|
Folders to back up |
|
Snapshot options |
|
Database options |
|
Override restrictions |
|
Add an Office 365 App for Teams
On the Add Office 365 app page, specify the settings for the Teams app that will contain the teams that you want to back up.
Settings | Steps |
---|---|
Service type |
|
Name |
|
Server plan |
|
Infrastructure settings |
|
Teams connection details |
Note: After creating a Teams app, if you make any changes to the app from the Azure portal, you must reacquire the token. |
Enable Multi-Factor Authentication for the Global Administrator Account
If you disabled multi-factor authentication for the global administrator account, enable it again.
Reacquire the token.
Exclude the Azure Service Accounts for Teams from Certain Policies
Exclude the service accounts that are created by the express configuration from the following policies:
Modern authentication policies
Automatic password reset policies