Configuring Access to Azure Resources Using a Managed Identity

To give the Commvault software access to the Azure resources that you want to protect, you can configure a system-assigned managed identity on the Azure VMs that you will use as Commvault access nodes. After you configure the managed identity, to the managed identity, assign Commvault custom roles or Azure built-in roles for the types of resources that you want to protect.

Using a managed identity is the securest and simplest way to give Commvault access to your Azure resources.

Procedure

1. Configure a system-assigned managed identity on the Azure VMs that you will use as Commvault access nodes.

   For instructions, see Configure managed identities on Azure virtual machines (VMs).

2. To the managed identity, assign Commvault custom roles or Azure built-in roles for the types of resources that you want to protect.

   • For instructions, see Assign Azure roles to a managed identity.

   • For role requirements, see Role Requirements for Protecting Azure Resources with Commvault.