How to Back Up ARM Role Assignments with Veeam Backup for Entra ID
Challenge
This article documents the additional configuration necessary to enable Veeam Backup for Microsoft Entra ID to back up relationships between protected resources and management groups as part of the backup scope.
By default, Veeam Backup for Microsoft Entra ID does not back up relationships between protected resources and management groups.
Solution
Part 1: Set Permissions
The application must have a Reader Role in the Azure Root management group. This can be added automatically or manually depending on whether or not the Tenant has been added to the Inventory already:
Automatic
This method can be used when the Tenant has not yet been added to Veeam Backup & Replication Inventory.
- The user should be able to assign roles in all Azure subscriptions and management groups associated with the tenant.
To learn how to grant this privilege, see Microsoft Azure Docs. - Close all Veeam Backup & Replication Consoles (veeam.backup.shell.exe)
- Create the following registry value on the Veeam Backup Server:
- Key Location: HKLM\SOFTWARE\Veeam\Veeam Backup and Replication\
- Value Name: ProcessARMRoleAssignments
- Value Type: String Value (REG_SZ)
- Value Data: true
- Open the Veeam Backup & Replication Console.
- Add the Tenant to Inventory.
Manually
This method must be used when the tenant has already been added to the Veeam Backup & Replication Inventory node.
- Assign the Reader role to the application in the Root management group.
To learn how to grant this privilege, see Microsoft Azure Docs.
Part 2: Enable Processing
After setting the Reader role, you must enable the processing of ARM RoleAssignments.
- Enable the processing of ARM RoleAssignments by adding the option key "ProcessArmRoleAssignments" to the appsettings.json file.
You must create the file manually if it doesn't exist in the Plugin folder:
C:\Program Files (x86)\Veeam\Backup Transport\x64\Plugins\EntraId\
Example of appsettings.json file content:
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please, try again later.