# 3. HI GIO M365 BaaS
## Overview
This is a document on how to:
* *Add New Organizations*
* *Create a Backup Job*
* *Restore on Self-service Restore Portal*
## **Procedure**
{% tabs %}
{% tab title="1. How To Add New Organizations on the HI GIO Portal" %}
**Step 1:** Log in to HI GIO Portal with your company account.
* In the Enter Company\User and Enter password fields, specify the credentials of an authorized user.
* The user name must be provided in the Company Name\User format.
* Click **Log in.**
**Step 2:** At the top right corner of the HIGIO Portal., click **Configuration**
**Step 3:** In the configuration menu on the left, click Plugin Library, then Click the **Veeam Backup for Microsoft 365** plugin tile.
**Step 4:** In the menu on the left, click **Organizations**, then at the top of the list, click New.
**Step 5:** At the **Protected Services** step of the wizard, select Microsoft services that you want to protect (Exchange Online, SharePoint Online and OneDrive for Business, Microsoft Teams, Teams chats).
You can select Microsoft Teams and Teams chats check boxes only if both Exchange Online, SharePoint Online, and OneDrive for Business check boxes are selected.
{% hint style="warning" %}
**Attention:** Backing up Teams chats requires using protected APIs and additional billing charges from Microsoft. For details, see Microsoft Docs. For details on configuring your backup infrastructure to back up Teams chats, see this [Veeam KB article.](https://www.veeam.com/kb4340)
{% endhint %}
**Step 6:** At the Connections Settings step of the wizard, select Microsoft Azure region is **Default**
**Step 7:** At the Application Settings step of the wizard, select the **Register a new Azure AD application automatically** option and specify the name of the new Azure AD application.
\[If you have selected to protect SharePoint Online and OneDrive for Business] Select a**llow this application to enable export mode for SharePoint Web Parts** check box to allow Veeam Backup for Microsoft 365 to back up web parts of your Microsoft SharePoint sites. For details on web parts, see [Microsoft Docs](https://docs.microsoft.com/en-us/visualstudio/sharepoint/creating-web-parts-for-sharepoint?view=vs-2019).
**Step 8:** At the **Microsoft 365 Logon** step of the wizard, log in to your Microsoft 365 organization:
Click **Copy code** to copy an authentication code.
* Consider that the code is valid for 15 minutes. You can click **Refresh code** to request a new code from Microsoft.
* Click the Microsoft verification portal link.
* A web browser window will open.
* On the **Sign in to your account** webpage, paste the code you have copied and sign in to Microsoft Azure.
* Make sure to sign in with the user account that has the *Global Administrator* role. For details on this role, see [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles).
Return to the wizard and click **Next** when the Verification status: **Verified**
**Step 9:** Review organization settings and click **Finish at the Summary step of the wizard**.
***From now on, these steps below just need to be done one time***
**Step 10: Register AzureADServicePrincipal for Tenant**
Azure AD application that end users and restore operators from tenant organizations will use to access Restore Portal must be created for a Microsoft 365 organization on a service provider side.
* Open the Powershell
* Update PowerShell with Winget by below command
```
winget install --id Microsoft.Powershell --source winget
```
* Run the [Install-Module](https://docs.microsoft.com/en-us/powershell/module/powershellget/install-module?view=powershell-7.3) cmdlet to install the Azure Active Directory PowerShell for Graph module. For more information, see [this Microsoft article](https://docs.microsoft.com/en-us/microsoft-365/enterprise/connect-to-microsoft-365-powershell?view=o365-worldwide#step-1-install-the-required-software).
* Open a Windows PowerShell Command Prompt window. Depending on the permissions of your logged-in account, you may need to open the PowerShell window in Administrator mode.
* To install the v1 module of the SDK in PowerShell Core or Windows PowerShell, run the following command:
```
Install-Module Microsoft.Graph -Scope CurrentUser
```
This process may take some time to complete.
* Run this command to install the beta module:
```
Install-Module Microsoft.Graph.Beta
```
* Run this command to install AzureAD module:
```
Install-Module AzureAD
```
* Register AzureADServicePrincipal with Power Shell
* Connect to Organization and register AzureADServicePrincipal using the command below.
**Connect-AzureAD**
This command to log in to Azure Organization, the please user account that has Global Administrator permission
**New-AzureADServicePrincipal -AppId "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"**
The AppId support team will provide for customers.
***Example: New-AzureADServicePrincipal -AppId "514abb4a-63c9-44b9-9f88-2b188b32a3cf"***
**Step 11:** Grant admin consent to this application on behalf of all users in the tenant organization
1. Access Azure Portal with a user account that has Global Administrator permission
2. Find AzureADServicePrincipal by application ID.
3. Choose tab permission to Grant admin consent.
{% endtab %}
{% tab title="2. How To Create a Backup Job" %}
**Step 1:** To launch the **New Backup Job** wizard:
1. In the menu on the left, click **Backup Jobs**.
2. Open the **Microsoft 365 Objects** tab.
3. At the top of the jobs list, click **Create Job** and select Backup Job.
4. Veeam Service Provider Console will open the **New Backup Job** wizard.
**Step 2:** At the **Job Name** step of the wizard, specify the job name and description.
**Step 3:** At the **Organization** step of the wizard, choose an organization to back up:
1. Click **Select**.
2. In the **Available Organizations** window, select an organization to back up.
3. Click **Apply**.
**Step 4:** At the **Backup Mode** step of the wizard, select the mode in which you want to create a backup:
1. In the **Backup scope** section, specify objects to back up:
2. Select the **Entire organization** option to back up the whole organization.
{% hint style="warning" %}
***This option is not recommended due to the time it takes to back up the whole organization. We should choose what to back up.***
{% endhint %}
* Select the **Back up the specified objects** option to back up individual objects:
* Click **Configure**.
* In the **Objects to Back up** window, select the type of object to back up: *User*, *Group*, *Site*, *Teams, Personal Sites,* or *Current organization*.
The list of available objects depends on which Microsoft Online services are selected in the organization settings.
* Click **Add**. In this guide, I choose User for **Objects to back up**
* Select an object in the list to customize processing options, click **Edit Processing Options,** or click a link in the **Processing Options** column.
* \[For *User*, *Teams*, *Group,* and *Current organization* object types] In the **Edit processing options** window, select the necessary processing options and click **Save**.
Note that processing options for *Current organization* objects will be applied to all users, groups, sites, and teams in the organization.
\[For *Teams* and *Current organization* object types] You can modify the *Chats* and *Teams chats* check boxes only if the *Teams* *chats* protected service is selected in the organization settings.
For details about available object types and their processing options, see the section [Organization Object Types](https://helpcenter.veeam.com/docs/vbo365/guide/vbo_object_types.html) of the Veeam Backup for Microsoft 365 User Guide.
**#Optional:** To exclude specific objects, in the **Exclusions** section, set the toggle to *On* and specify objects to exclude:
**Step 5:** Review backup job settings at the wizard's Summary step.
After creating a Backup Job, please contact the support team to apply the daily schedule.
{% endtab %}
{% tab title="3.How To Restore On Self-service Restore Portal" %}
**Step 1:** Open a web browser on any computer and navigate to the Restore Portal web address
* Internet Explorer is not supported. To access Restore Portal, use Microsoft Edge (version 79 or later), Mozilla Firefox (version 21 or later), or Google Chrome (version 24 or later).
* Log in with the Microsoft Office account that you need to restore items. You must provide a user account in one of the following formats: ** or [*user@domain.onmicrosoft.com*](mailto:user@domain.onmicrosoft.com).
* Click **Log In.**
* Restore Portal will redirect you to the Microsoft authentication portal where you will be prompted to enter your Microsoft 365 user account password.
**Step 2:** Select a restore point from which you want to explore and restore data from backups created by Veeam Backup for Microsoft 365. For more information on how to view and select available restore points in Restore Portal, see [Selecting Restore Point](https://helpcenter.veeam.com/docs/vbo365/guide/ssp_selecting_restore_point.html).
To view available restore points and select a restore point that you want to use, do the following:
* In the upper-left corner of the Restore Portal window, click **Select Restore Point** or the restore point timestamp.
* In the displayed dialog box, do one of the following:
* In the calendar, click the date for which Veeam Backup for Microsoft 365 has available restore points. Such dates are marked in bold. The available restore points for the selected date will be displayed on the right.
* Click **Select Latest Point** to select the latest restore point available in a backup repository.
* Click **Apply**.
**Step 3:** Example with Exchange Restore
To restore Exchange items, do the following:
1. Open the **Explore** tab.
2. Select a restore point from which you want to explore and restore data. For more information, see [Selecting Restore Point](https://helpcenter.veeam.com/docs/vbo365/guide/ssp_selecting_restore_point.html).
3. In the navigation pane, browse through the hierarchy of folders with backed-up data.
4. Select a folder that contains the data you want to restore.
5. Select check boxes next to the necessary Exchange items in the preview pane.
6. Click **Restore**.
The **Exchange Restore** wizard runs to configure the restore operation options.
**Step 4:** At the **Items** step, specify the items you want to restore. If you no longer wish to restore an item, select it and click **Remove**.
**Step 5:** At the **Restore mode** step, select where you want to restore the selected items:
* **Restore to the original location**. Select this option if you want to restore the selected items to their original location.
* **Restore to a new location**. Select this option if you want to restore the selected items to another location and specify the folder name in the **Restore to the following folder** field. If the specified folder does not exist, it will be created automatically.
**Step 6:** Click **Advanced options** to open the **Restore options** dialog.
In the **Restore Options** dialog, select check boxes next to the additional options that you want to apply during the restore operation and then click **Apply**:
* **Restore changed items**. Select this check box if you want to restore items that have been changed.
* **Restore missing items**. Select this check box if you want to restore missing items in the target folder.
* **Mark restored items as unread**. Select this check box if you want to mark each restored item as unread.
Default is all options are selected.
**#Optional:** At the **Reason** step, specify a restore reason. This information will be available in the **Reason** column on the **Restore Sessions** tab, which you can reference later.
**Step 7:** At the **Summary** step, review the details of the restore operation and click **Finish**.
The Restore Portal runs the restore operation immediately and opens the Restore Sessions tab, where you can view details about the restore session's progress and results.
As we can see, restore items were restored to the Restore folder that we chose and marked as unread.
Restore other items. We can do the same step with Restore Exchange items.
{% endtab %}
{% endtabs %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.higiocloud.vn/back-up-as-a-service/3.-hi-gio-m365-baas.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
