Azure AD and App Registrations

Azure Service accounts can be chosen from an Existing Account or created automatically on configuration. This gives greater control and provides the API access required by the VBAzure appliance. Organizations will likely prefer to set this themselves, and not let the application create. In order to use a preexisting account, an App Registration must be made in Azure Active Directory.  Help Center Link

Return to your Home Screen Search for Azure Active Directory feature

Return to your Home Screen Search for Azure Active Directory feature

From the left-hand menu then  Find and select App registrations   Click +New registration
  1. From the left-hand menu then Find and select App registrations

  2. Click +New registration

Name Registration (Note Registration name for later) and then select Register from below.

Name Registration (Note Registration name for later) and then select Register from below.

Using the Azure Portal Menu return to your Resource GroupSelect Access Control (IAM) from the left  Select +ADD and Add Role Assignment
  1. Using the Azure Portal Menu return to your Resource Group

  2. Select Access Control (IAM) from the left

  3. Select +ADD and Add Role Assignment

AD#5.png
Select Role OwnerAssign Access to Azure AD, group or service principalIn the Search Field put in App Registration Name and selectClick SaveFrom the Azure Portal Menu find Azure Active Directory
  1. Select Role Owner

  2. Assign Access to

  3. Azure AD, group or service principal

  4. In the Search Field put in App Registration Name and select

  5. Click Save

  6. From the Azure Portal Menu find Azure Active Directory

Select App Registrations again and choose your newly created registrationCopy the Application ID and Directory ID. Copy to Note pad.
  1. Select App Registrations again and choose your newly created registration

  2. Copy the Application ID and Directory ID. Copy to Note pad.

Select Certificates & secretsAdd New client secret and copy to notepad.
  1. Select Certificates & secrets

  2. Add New client secret and copy to notepad.

That is all. Easy setup, just need to know where to go. Use the information you gathered to configured the Azure Account in the Veeam Appliance. Then get rid of that Notepad file. Rememebr- the Secret will not be available again- you will need to recreate it should you need to reconfigured. Not a big deal- in fact it allows you to revoke and setup new Secrets for different apps.

Next
Next

Private Endpoints