Getting started with SaaS Backup for Office 365 Edit on GitHub Request doc changes

Getting started with NetApp SaaS Backup (formerly "NetApp Cloud Control") for Office 365 includes various steps such as deciding what type of storage you want to use to back up your data, gathering pertinent information, creating a MS Office 365 service account, and assigning user permissions.

Deciding what type of storage to use to back up your data

NetApp SaaS Backup for Office 365 Control provides Amazon S3 storage and Azure Blob storage as options for backup. SaaS Backup for Office 365 also enables you to Bring Your Own Storage (BYOS) to back up your data. If you choose to use storage provided by SaaS Backup, you do not need to gather any information before signing up. If you choose the BYOS option, you must gather pertinent information about your storage before signing up.

Gathering information about your SaaS Backup for Office 365 storage platform

You need the following information to set up your BYOS Amazon S3 storage, StorageGRID Webscale object storage, or Azure Blob storage.

  • Amazon S3
    If you are using the Amazon S3 bucket provided by SaaS Backup, you do not need to gather this information. If you are using your own Amazon S3 bucket, you must gather the following information:

    • Bucket name

    • Region

    • Access key

    • Secret key

  • StorageGRID Webscale
    SaaS Backup does not create the StorageGRID Webscale bucket. It must already exist.

    • Host/IP address
      You must have a public IP address and a domain name with a certificate, for example, webscale.netapp.com. You must also be using Transport Layer Security (TLS) protocol 1.2.

    • Port
      The open port should be 8082 or 443, whichever is configured.

    • Bucket name

    • Access key

    • Secret key

  • Azure Blob

    • Account name

    • Container name

    • Access point

    • Access key

Creating a new MS Office 365 service account with global administrator permissions

Creating a new Microsoft Office 365 service account with global administrator permissions is recommended when signing up for SaaS Backup for Office 365. However, creating a new account is not required. If you prefer, you can use your existing Microsoft Office 365 service account.

Steps
  1. Log in to your Office 365 Management portal using an account with administrative privileges.

  2. Click Users.
    Screenshot of users icon

  3. Select Active users, and then click Add a user.
    Screenshot of Office 365 Admin Center

  4. Enter the details of the new service account.

    • First name

    • Last name

    • Display name

    • User name
      The user name is the name of the service account.
      Screenshot of new user form

  5. Expand Roles, select Global administrator as the role, and then click Add.
    Screenshot of available administrator roles in Office 365
    The service account details are sent to the administrator.

  6. Log in to your Office 365 Management Portal with the new account to activate it.

  7. Ensure that the service account includes licenses for Exchange Online and SharePoint Online, at a minimum.

    This is especially important if you restrict the individual licenses for the Global administrator role.

Assigning user permissions to your MS Office 365 service account

Before you sign up for SaaS Backup, you must assign user permissions to your Microsoft Office 365 service account. The process you follow to assign user permissions depends on the Microsoft services (Exchange Online, SharePoint Online, OneDrive for Business) you are using with SaaS Backup.

Assigning user permissions for Microsoft Exchange online

If you plan to use SaaS Backup with Microsoft Exchange Online, you must configure impersonation. Impersonation allows your Microsoft Office 365 service account to impersonate user accounts and access associated permissions.

To automatically configure impersonation, run MSDN PowerShell Commands.

To manually configure impersonation:

Steps
  1. Use Exchange Admin Center or an administrator account to log in to your Microsoft Office 365 service account.

  2. Select the Exchange tab.

  3. In the left navigation pane, under Dashboard, select Permissions.

  4. Click Admin roles.

  5. Double-click in the right pane to select Discovery management.

  6. Under Roles, click the + symbol.
    write scope

  7. Select ApplicationImpersonation from the drop-down menu.

  8. Click Add.

  9. Click OK.

  10. Verify that ApplicationImpersonation was added under Roles.

  11. Under Members, click the + symbol.
    members
    A new window appears

  12. Choose the user name.

  13. Click Add.

  14. Click OK.

  15. Verify that the user name appears in the Members section.

  16. Click Save.

Signing up with a NetApp SSO account

Steps
  1. Enter the SaaS Backup for Office 365 URL into your web browser:
    https://saasbackup.netapp.com

  2. Click Sign up at the bottom of the landing page.

  3. Accept the End-User License Agreement.

  4. Click Sign Up with NetApp SSO.
    Screenshot of button clicked to sign for SaaS Backup for Office 365 using a NetApp SSO account

  5. Enter your NetApp SSO and password, and then click LOGIN.

  6. Enter the requested user information, and then click Sign Up.

  7. Click the Services icon.
    Screenshot of SaaS Backup for Office 365 services icon

  8. Click the Microsoft Office 365 icon to select the SaaS service.
    MS Office 365 icon

  9. Click Add Microsoft Office 365 Account.

  10. Enter the email address and password for your Microsoft Office 365 global administrator service account, and then click Sign in.
    A list of the permissions requested by SaaS Backup for Office 365 is displayed.

  11. Click Accept.

  12. Click Next.
    A list of the available Microsoft Office 365 services is displayed.

  13. Select the Microsoft Office 365 services that you want to activate.

  14. Click Next.

  15. Select the subscription type.
    For the Free Trial, enter the activation code provided by your channel partner or sales representative, or obtained from a marketing representative through email.
    For a Licensed subscription, you must enter the requested information, and then validate the subscription.

  1. Click Next.

  2. Select your backup storage option.
    You can use storage provided by SaaS Backup or the Bring Your Own Storage (BYOS) option.

    1. If you are using storage provided by SaaS Backup:

      1. Click SaaS Backup Provided Storage.

      2. Select the Amazon S3 or Azure Blob storage option.

      3. Click Next.

      4. Review your configuration, and then click Save.

    2. If you are using the BYOS option:

      1. Click Bring Your Own Storage (BYOS).

      2. Click your BYOS option.

      3. Enter the information you previously gathered for your BYOS option.

      4. Click Test Connection.

      5. Click Next.

      6. Review your configuration, and then click Save.

Moving unprotected data to a protected state

When you set up SaaS Backup for Office 365, by default, your data is unprotected. You must move your data from an unprotected state to one of the backup policy tiers for it to be scheduled for back up.

Steps
  1. From the Dashboard, select the service containing the unprotected data.

  2. Click view next to the number of unprotected mailboxes, MySites, sites or groups.

  3. Select the items that you want to protect.

  4. Click the Groups menu.
    Screenshot of the SaaS Backup Groups Menu button

  5. Select the tier for the backup policy that you want to assign.
    See Moving unprotected data to a protected state for a description of the backup policy tiers.

  6. Click Apply.

Performing an immediate backup of a specific backup policy

When you set up SaaS Backup for Office 365, by default, all of your data is unprotected. After you move your data to a protected tier, you can perform an immediate backup of the tier to which you moved your data. This prevents your data from being at risk until the first scheduled backup occurs. If you can wait for the first scheduled backup, performing an immediate backup is not necessary.

You can perform an immediate backup any time you deem necessary for data protection. If you are running a trial version of SaaS Backup for Office 365, you can only perform three immediate backups per day, per service.

Steps
  1. From the Dashboard, select the service for which you want to perform an immediate backup.

  2. Under Backup Policies, click the tier that you want to back up.

  3. Click Backup Now.
    Screenshot of the the SaaS Backup "Backup Now" button
    A message is displayed indicating that the services under the selected tier will be placed in the job queue for immediate backup.

  4. Click Confirm.
    A message is displayed indicating that the backup job was created.

  5. Click View the job progress to monitor the progress of the backup.