May 19, 2024
042222 1711 Howtoconfig1 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365
Veeam Backup for Microsoft 365 Modern Authentication and Legacy Protocols Authentication requires that you grant permissions to Azure AD applications to back up and restore data from/to your Microsoft 365 organizations.

Veeam Backup for Microsoft 365 Modern Authentication and Legacy Protocols Authentication requires that you grant permissions to Azure AD applications to back up and restore data from/to your Microsoft 365 organizations.

042222 1711 Howtoconfig1 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

1.Sign in Azure portal with Global Admin account.

2.Search for and select Azure Active Directory.

042222 1711 Howtoconfig2 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

3.Under Manage, select App registrations.

042222 1711 Howtoconfig3 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

4.On the App registrations page, select +New registration.

042222 1711 Howtoconfig4 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

5.On the Register an application page, type VBO365APP as application Name, select Accounts in this organization directory only, click Register.

042222 1711 Howtoconfig5 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

6.When registration finishes, the Azure portal displays the app registration’s Overview pane. You see the Application (client) ID. Also called the client ID, this value uniquely identifies your application in the Microsoft identity platform, select API permissions.

042222 1711 Howtoconfig6 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

7.On the Configured permissions page, select +Add permission.

042222 1711 Howtoconfig7 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

8.On the Request API permissions page, select Microsoft Graph.

042222 1711 Howtoconfig8 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

9.On the Microsoft Graph page, select Application permissions.

042222 1711 Howtoconfig9 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

10.On the Select permission page, expend Directory, select Directory.Read.All.

042222 1711 Howtoconfig10 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

11.On the Select permission page, expend Group, select Group.Read.All.

042222 1711 Howtoconfig11 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

12.On the Select permission page, expend TeamSettings, select TeamSettings.ReadWrite.All.

042222 1711 Howtoconfig12 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

13.On the Select permission page, expand Sites, select Sites.Read.All, click Add permissions.

042222 1711 Howtoconfig13 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

14.On the Configured permissions page, select +Add permission.

042222 1711 Howtoconfig14 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

15.On the Request API permissions page, select APIs my organization uses.

042222 1711 Howtoconfig15 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

16.On the API my organization uses page, search and select Office 365 Exchange Online.

042222 1711 Howtoconfig16 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

17.On the Office 365 Exchange Online page, select Application permissions.

042222 1711 Howtoconfig17 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

18.On the Select permission page, select full_access_as_app, click Add permissions.

042222 1711 Howtoconfig18 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

19.On the Configured permissions page, select +Add permission.

042222 1711 Howtoconfig19 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

20.On the Request API permissions page, select Microsoft APIs, click SharePoint

042222 1711 Howtoconfig20 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

21.On the SharePoint page, select Application permissions.

042222 1711 Howtoconfig21 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

22.On the Select permission page, expand Sites, select Sites.FullControl.All.

042222 1711 Howtoconfig22 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

23.On the Select permission page, expand Users, select User.Read.All, click Add permissions.

042222 1711 Howtoconfig23 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

24.On the Configured permissions page, click Grant admin consent for domain name (in my case is carysun.com).

042222 1711 Howtoconfig24 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

25.On the Grant admin consent confirmation page, click Yes.

042222 1711 Howtoconfig25 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

26.Verify status of all API without warning.

042222 1711 Howtoconfig26 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

Create Application secrets (Optional)

If you would like to use Application secret on Exchange Online credentials settings of VBO365, you need to create Application secret from Certificate & secrets settings.

1.On the Application page, select Certificates & Security.

042222 1711 Howtoconfig27 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

2.On the Certificates & secrets page, select Clients secrets.

042222 1711 Howtoconfig28 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

3.On the Client secrets page, select +New client secret.

042222 1711 Howtoconfig29 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

4.On the Add a client secret page, enter information for the secret description, select Expires period, click Add.

042222 1711 Howtoconfig30 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

5.Copy the Value, it will be as the Application secret of VBO settings.

042222 1711 Howtoconfig31 - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

Hope you enjoy this post.

Cary Sun

Twitter: @SifuSun

Web Site: carysun.com

Blog Site: checkyourlogs.net

Blog Site: gooddealmart.com

ca16fbd3199de5f66b829b87082fb970?s=80&d=retro&r=g - How to configure Azure AD Application Permissions for Modern Authentication and Legacy Protocols Authentication of Veeam Backup for Microsoft 365

Author: Cary Sun

Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.

Blog site: https://www.checkyourlogs.net
Web site: https://carysun.com
Blog site: https://gooddealmart.com
Twitter: @SifuSun
in: https://www.linkedin.com/in/sifusun/
Amazon Author: https://Amazon.com/author/carysun