3. HI GIO M365 BaaS

Overview

This is a document on how to:

• Add New Organizations

• Create a Backup Job

• Restore on Self-service Restore Portal

Procedure

1. How To Add New Organizations on the HI GIO Portal

Step 1: Log in to HI GIO Portal https://portal-hcmc02-backup.higiocloud.vn/ with your company account.

• In the Enter Company\User and Enter password fields, specify the credentials of an authorized user.

• The user name must be provided in the Company Name\User format.

• Click Log in.

Step 2: At the top right corner of the HIGIO Portal., click Configuration

Step 3: In the configuration menu on the left, click Plugin Library, then Click the Veeam Backup for Microsoft 365 plugin tile.

Step 4: In the menu on the left, click Organizations, then at the top of the list, click New.

Step 5: At the Protected Services step of the wizard, select Microsoft services that you want to protect (Exchange Online, SharePoint Online and OneDrive for Business, Microsoft Teams, Teams chats).

You can select Microsoft Teams and Teams chats check boxes only if both Exchange Online, SharePoint Online, and OneDrive for Business check boxes are selected.

Attention: Backing up Teams chats requires using protected APIs and additional billing charges from Microsoft. For details, see Microsoft Docs. For details on configuring your backup infrastructure to back up Teams chats, see this Veeam KB article.

Step 6: At the Connections Settings step of the wizard, select Microsoft Azure region is Default

Step 7: At the Application Settings step of the wizard, select the Register a new Azure AD application automatically option and specify the name of the new Azure AD application.

[If you have selected to protect SharePoint Online and OneDrive for Business] Select allow this application to enable export mode for SharePoint Web Parts check box to allow Veeam Backup for Microsoft 365 to back up web parts of your Microsoft SharePoint sites. For details on web parts, see Microsoft Docs.

Step 8: At the Microsoft 365 Logon step of the wizard, log in to your Microsoft 365 organization:

Click Copy code to copy an authentication code.

• Consider that the code is valid for 15 minutes. You can click Refresh code to request a new code from Microsoft.

• Click the Microsoft verification portal link.

• A web browser window will open.

• On the Sign in to your account webpage, paste the code you have copied and sign in to Microsoft Azure.

• Make sure to sign in with the user account that has the Global Administrator role. For details on this role, see Microsoft Docs.

Return to the wizard and click Next when the Verification status: Verified

Step 9: Review organization settings and click Finish at the Summary step of the wizard.

From now on, these steps below just need to be done one time

Step 10: Register AzureADServicePrincipal for Tenant

Azure AD application that end users and restore operators from tenant organizations will use to access Restore Portal must be created for a Microsoft 365 organization on a service provider side.

• Open the Powershell

• Update PowerShell with Winget by below command

winget install --id Microsoft.Powershell --source winget

• Run the Install-Module cmdlet to install the Azure Active Directory PowerShell for Graph module. For more information, see this Microsoft article.

• Open a Windows PowerShell Command Prompt window. Depending on the permissions of your logged-in account, you may need to open the PowerShell window in Administrator mode.

• To install the v1 module of the SDK in PowerShell Core or Windows PowerShell, run the following command:

Install-Module Microsoft.Graph -Scope CurrentUser

This process may take some time to complete.

• Run this command to install the beta module:

Install-Module Microsoft.Graph.Beta

• Run this command to install AzureAD module:

Install-Module AzureAD

• Register AzureADServicePrincipal with Power Shell

  • Connect to Organization and register AzureADServicePrincipal using the command below.

Connect-AzureAD

This command to log in to Azure Organization, the please user account that has Global Administrator permission

New-AzureADServicePrincipal -AppId "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"

The AppId support team will provide for customers.

Example: New-AzureADServicePrincipal -AppId "514abb4a-63c9-44b9-9f88-2b188b32a3cf"

Step 11: Grant admin consent to this application on behalf of all users in the tenant organization

1. Access Azure Portal https://portal.azure.com/ with a user account that has Global Administrator permission

2. Find AzureADServicePrincipal by application ID.

1. Choose tab permission to Grant admin consent.

2. How To Create a Backup Job

Step 1: To launch the New Backup Job wizard:

1. In the menu on the left, click Backup Jobs.

2. Open the Microsoft 365 Objects tab.

3. At the top of the jobs list, click Create Job and select Backup Job.

4. Veeam Service Provider Console will open the New Backup Job wizard.

Step 2: At the Job Name step of the wizard, specify the job name and description.

Step 3: At the Organization step of the wizard, choose an organization to back up:

1. Click Select.

2. In the Available Organizations window, select an organization to back up.

3. Click Apply.

Step 4: At the Backup Mode step of the wizard, select the mode in which you want to create a backup:

1. In the Backup scope section, specify objects to back up:

2. Select the Entire organization option to back up the whole organization.

This option is not recommended due to the time it takes to back up the whole organization. We should choose what to back up.

• Select the Back up the specified objects option to back up individual objects:

  • Click Configure.

• In the Objects to Back up window, select the type of object to back up: User, Group, Site, Teams, Personal Sites, or Current organization.

The list of available objects depends on which Microsoft Online services are selected in the organization settings.

• Click Add. In this guide, I choose User for Objects to back up

• Select an object in the list to customize processing options, click Edit Processing Options, or click a link in the Processing Options column.

• [For User, Teams, Group, and Current organization object types] In the Edit processing options window, select the necessary processing options and click Save.

Note that processing options for Current organization objects will be applied to all users, groups, sites, and teams in the organization.

[For Teams and Current organization object types] You can modify the Chats and Teams chats check boxes only if the Teams chats protected service is selected in the organization settings.

For details about available object types and their processing options, see the section Organization Object Types of the Veeam Backup for Microsoft 365 User Guide.

#Optional: To exclude specific objects, in the Exclusions section, set the toggle to On and specify objects to exclude:

Step 5: Review backup job settings at the wizard's Summary step.

After creating a Backup Job, please contact the support team to apply the daily schedule.

3.How To Restore On Self-service Restore Portal

Step 1: Open a web browser on any computer and navigate to the Restore Portal web address https://portal-hcmc02-restore.higiocloud.vn/

• Internet Explorer is not supported. To access Restore Portal, use Microsoft Edge (version 79 or later), Mozilla Firefox (version 21 or later), or Google Chrome (version 24 or later).

• Log in with the Microsoft Office account that you need to restore items. You must provide a user account in one of the following formats: [e-mail] or [e-mail].

• Click Log In.

• Restore Portal will redirect you to the Microsoft authentication portal where you will be prompted to enter your Microsoft 365 user account password.

Step 2: Select a restore point from which you want to explore and restore data from backups created by Veeam Backup for Microsoft 365. For more information on how to view and select available restore points in Restore Portal, see Selecting Restore Point.

To view available restore points and select a restore point that you want to use, do the following:

• In the upper-left corner of the Restore Portal window, click Select Restore Point or the restore point timestamp.

  • In the displayed dialog box, do one of the following:

  • In the calendar, click the date for which Veeam Backup for Microsoft 365 has available restore points. Such dates are marked in bold. The available restore points for the selected date will be displayed on the right.

• Click Select Latest Point to select the latest restore point available in a backup repository.

• Click Apply.

Step 3: Example with Exchange Restore

To restore Exchange items, do the following:

1. Open the Explore tab.

2. Select a restore point from which you want to explore and restore data. For more information, see Selecting Restore Point.

3. In the navigation pane, browse through the hierarchy of folders with backed-up data.

4. Select a folder that contains the data you want to restore.

5. Select check boxes next to the necessary Exchange items in the preview pane.

6. Click Restore.

The Exchange Restore wizard runs to configure the restore operation options.

Step 4: At the Items step, specify the items you want to restore. If you no longer wish to restore an item, select it and click Remove.

Step 5: At the Restore mode step, select where you want to restore the selected items:

• Restore to the original location. Select this option if you want to restore the selected items to their original location.

• Restore to a new location. Select this option if you want to restore the selected items to another location and specify the folder name in the Restore to the following folder field. If the specified folder does not exist, it will be created automatically.

Step 6: Click Advanced options to open the Restore options dialog.

In the Restore Options dialog, select check boxes next to the additional options that you want to apply during the restore operation and then click Apply:

• Restore changed items. Select this check box if you want to restore items that have been changed.

• Restore missing items. Select this check box if you want to restore missing items in the target folder.

• Mark restored items as unread. Select this check box if you want to mark each restored item as unread.

Default is all options are selected.

#Optional: At the Reason step, specify a restore reason. This information will be available in the Reason column on the Restore Sessions tab, which you can reference later.

Step 7: At the Summary step, review the details of the restore operation and click Finish.

The Restore Portal runs the restore operation immediately and opens the Restore Sessions tab, where you can view details about the restore session's progress and results.

As we can see, restore items were restored to the Restore folder that we chose and marked as unread.

Restore other items. We can do the same step with Restore Exchange items.