Veeam Data Cloud (comnam90/veeam-docs-vdc-dump)

Veeam Data Cloud Docs

https://github.com/comnam90/veeam-docs-vdc-dump
Admin
Unofficial documentation dump for Veeam Data Cloud (VDC). SaaS backup platform including VDC for...

Tokens:183,021
Snippets:1,823
Trust Score:7.3
Update:3 weeks ago
Show doc for...
Context Summary (auto-generated)
Raw
# Veeam Data Cloud Documentation

Veeam Data Cloud is a SaaS platform that provides centralized data protection for multiple cloud workloads through a single web portal. It eliminates the need for setting up and maintaining backup infrastructure, offering backup-as-a-service for Microsoft 365, Microsoft Azure, Microsoft Entra ID, and Salesforce environments. The platform enables organizations to manage users, subscriptions, and all protected workloads from one location.

The platform supports comprehensive backup and restore operations across all supported workloads, with features including automated backup policies, granular restore options, advanced search capabilities, and detailed activity monitoring. Veeam Data Cloud Vault extends storage capabilities by integrating with Veeam Backup & Replication for hybrid backup scenarios.

## Accessing Veeam Data Cloud

Log into the Veeam Data Cloud portal at https://cloud.veeam.com using either Veeam My Account credentials or Microsoft 365 authentication. The first user becomes OrganizationAdmin with full management permissions.

```bash
# Access Veeam Data Cloud Portal
# Direct URL: https://cloud.veeam.com

# Authentication options:
# 1. Veeam My Account credentials
# 2. Microsoft 365 account (via Microsoft Entra authentication)

# Session timeout: 30 minutes of inactivity
# Supported browsers: Chrome, Edge (Chromium), Firefox (latest stable versions)

# First-time setup flow:
# 1. Accept invitation email from Veeam
# 2. Choose authentication method (Microsoft or Veeam)
# 3. Accept terms and conditions (first user only)
# 4. First user automatically assigned OrganizationAdmin role
```

## User and Role Management

Veeam Data Cloud provides role-based access control with organization-level and workload-specific roles. Roles define what operations users can perform and which tenants they can access.

```yaml
# Organization-Level Roles
OrganizationAdmin:
  - Full access to all workloads and tenants
  - Manage users, perform all backup/restore operations
  - First invited user automatically receives this role

OrganizationViewer:
  - View lists of users and tenants
  - Granted to all Veeam Data Cloud users

# Microsoft 365 Roles
M365:Administrator:
  - Add/manage tenants
  - All backup and restore operations
  - Configure tenant settings

M365:BackupOperator:
  - Add/manage tenants
  - Create and manage backup policies

M365:RestoreOperator:
  - View tenants
  - Perform restore operations only

# Microsoft Azure Roles
Azure:Administrator:
  - Full backup, restore, and settings within assigned tenants
  - Cannot add new tenants

# Microsoft Entra ID Roles
EntraID:Administrator:
  - Add tenants, full configuration
  - All backup and restore operations

EntraID:RestoreAdministrator:
  - Restore operations only

EntraID:Viewer:
  - View restore sessions, backed-up objects, logs

# Salesforce Roles
Salesforce:Administrator:
  - Add, rename, delete tenants
  - All backup, restore, and archival operations

Salesforce:BackupOperator:
  - Add tenants, manage backup policies
  - All restore and archival operations

Salesforce:RestoreOperator:
  - Restore operations only

# Veeam Data Cloud Vault Roles
Vault:Administrator:
  - Add tenants, all configuration and operations

Vault:Viewer:
  - Monitor operations without performing any
```

## Adding Microsoft 365 Tenants

Connect your Microsoft 365 tenant to Veeam Data Cloud using automatic or manual authentication. Automatic connection is recommended and requires Microsoft 365 Global Admin credentials.

```yaml
# Automatic Connection (Recommended)
# Requires: Microsoft 365 Global Admin account

Steps:
  1. Navigate: Microsoft 365 > Add Tenant
  2. Select: "Auto Connection"
  3. Optional: Check "Include Express Connection" for Premium plan
  4. Click: "Sign in with Microsoft"
  5. Authenticate with Global Admin account
  6. Accept required permissions
  7. Configure tenant settings:
     - Tenant Name: "Production-M365"
     - Storage Region: Select Azure region (e.g., "West Europe")
     - Services: Exchange, SharePoint, OneDrive, Teams
  8. Backup policy type:
     - Auto-create policies (recommended): Sets automatic backup for all users/sites/teams
     - Retention: Years, Days, or Unlimited
  9. Click: "Create Tenant"

# Manual Connection
# Requires: App Registration in Microsoft Entra ID

Prerequisites:
  - Create App Registration in Microsoft Entra ID
  - Assign required API permissions
  - Create and export X.509 certificate (PFX format)
  - Copy Application (client) ID

Configuration:
  Admin Email: "admin@contoso.com"
  App Registration ID: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  Certificate: "certificate.pfx"
  Password: "[certificate password if protected]"
```

## Adding Microsoft Azure Tenants

Register your Azure tenant with Veeam Data Cloud to enable VM, SQL, Azure Files, and Cosmos DB backup protection.

```yaml
# Azure Tenant Setup Wizard Steps

Step 1 - Launch Wizard:
  Navigate: Azure > Add Tenant

Step 2 - Connect to Azure:
  Authentication: Microsoft Entra credentials
  Required permissions: Subscription-level access

Step 3 - Select Subscription:
  Choose: Azure subscription containing resources to protect

Step 4 - Select Region:
  Backup Management Region: Select Azure region for backup infrastructure

Step 5 - Review and Create:
  Verify: Subscription ID, region, connection status
  Click: "Create Tenant"

# Supported Azure Workloads
- Azure Virtual Machines
- Azure SQL Databases
- Azure Files (file shares)
- Azure Cosmos DB
```

## Adding Salesforce Tenants

Connect Salesforce production and sandbox tenants to Veeam Data Cloud for comprehensive backup protection of records, files, and metadata.

```yaml
# Salesforce Tenant Setup

Steps:
  1. Navigate: Salesforce > Add Tenant
  2. Connect to Salesforce:
     - Click "Connect to Salesforce"
     - Authenticate with Salesforce credentials
  3. Configure Settings:
     - Tenant Name: "Production-Salesforce"
     - Storage Region: Select backup storage region
  4. Configure Default Backup Policy:
     - Schedule: Daily at specified time
     - Objects: All standard and custom objects
  5. Review and Create Tenant

# License Limits
Warning: 120% licensed users exceeded - allows new tenant
Blocked: 200% licensed users exceeded - prevents new tenant

# Auto-created Backup Policy
- Created automatically on tenant addition
- Protects all tenant data
- Edit via: Backup Policies > Edit
```

## Adding Veeam Data Cloud Vault Tenants

Create Vault tenants based on your subscription edition (Azure or AWS) to enable cloud storage integration with Veeam Backup & Replication.

```yaml
# Azure Edition Vault Tenant
Steps:
  1. Navigate: Vault > Add Tenant
  2. Select: Azure edition subscription
  3. Configure tenant settings
  4. Create storage vaults

# AWS Edition Vault Tenant
Steps:
  1. Navigate: Vault > Add Tenant
  2. Select: AWS edition subscription
  3. Configure tenant settings
  4. Create storage vaults

# Storage Vault Operations
- Add storage vault
- View/edit storage vault details
- Delete storage vault
- Assign vault to workloads (VBR, Azure Backup, Kasten)
```

## Microsoft 365 Backup Policies

Create and manage backup policies for Microsoft 365 workloads with Flex or Express policy types depending on your subscription plan.

```yaml
# Flex Backup Policy Creation
# Available for: Foundation and Premium plans

Wizard Steps:
  1. Launch: Microsoft 365 > Tenant > Backup Policies > New
  2. Policy Information:
     - Name: "Daily-Exchange-Backup"
     - Description: "Daily backup of all Exchange mailboxes"
  3. Backup Data Configuration:
     - Services: Exchange, SharePoint, OneDrive, Teams
     - Scope: All users / Specific groups / Selected users
  4. Schedule:
     - Frequency: Daily, Weekly, or Custom
     - Time: 2:00 AM UTC
  5. Retention:
     - Period: 1 Year / 30 Days / Unlimited
     - Note: Cannot reduce retention after initial set
  6. Complete wizard

# Express Backup Policy Creation
# Available for: Express and Premium plans
# Simpler configuration, fixed restore to original location

# Policy Types by Plan
Foundation Plan: Flex policies only
Express Plan: Express policies only
Premium Plan: Both Flex and Express policies
```

## Microsoft Azure Backup Policies

Create backup policies for Azure VMs, SQL databases, Azure Files, and Cosmos DB with configurable schedules and retention.

```yaml
# VM Backup Policy Creation

Wizard Steps:
  1. Navigate: Azure > Tenant > Backup > New VM Policy
  2. Policy Name: "Production-VM-Daily"
  3. Source Selection:
     - Select VMs by: Subscription, Resource Group, Tags
     - Include/Exclude specific VMs
  4. Protection Settings (SLA):
     - Backup frequency: Daily/Weekly
     - Retention: Days, Weeks, Months, Years
  5. Guest Processing (optional):
     - Application-aware processing
     - VSS quiescing
  6. Snapshot Settings:
     - Azure snapshot retention
  7. Notifications:
     - Email alerts on success/failure
  8. Complete policy creation

# Important Considerations
- VMs in multiple policies: processed by highest priority policy
- Restricted network disks: temporarily modified during backup
- Completely denied network access: backup will fail

# Additional Azure Policy Types
- SQL Backup Policy: azure_backup_create_sql
- Azure Files Policy: azure_backup_create_files
- Cosmos DB Policy: azure_backup_create_cosmosdb
```

## Salesforce Backup Policy Configuration

Edit automatically-created backup policies to customize schedules, encryption, and retention settings for Salesforce tenants.

```yaml
# Edit Backup Policy Wizard

Steps:
  1. Navigate: Salesforce > Tenant > Backup Policies > Edit
  2. Connection Settings:
     - Configure Salesforce API limits
     - Verify user permissions
  3. Schedule Configuration:
     - Frequency: Daily, Weekly, Custom
     - Time: Select backup window
     - Custom schedule: Specific days/times
  4. Backup Options:
     - Objects: Standard and custom objects
     - Metadata: Include/exclude metadata backup
  5. Encryption Settings:
     - Enable/disable encryption
     - Key management options
  6. Retention Settings:
     - Retention period: Days, Months, Years
     - Infinite retention option
  7. Review and Save

# Backup Policy Operations
- Enable/Disable policies
- Start/Stop backup sessions
- View backup logs and status
```

## Microsoft 365 Restore Operations

Restore Microsoft 365 data using Flex Restore (granular options) or Express Restore (quick full restore) depending on your plan.

```yaml
# Outlook Mailbox Flex Restore

Steps:
  1. Navigate: Microsoft 365 > Tenant > Restore > Outlook
  2. Select restore point:
     - Default: Latest available
     - Custom: Select specific date/time
  3. Select mailbox(es) to restore
  4. Click "Restore Selected Mailbox"
  5. Choose restore destination:
     - Original location
     - Other user's mailbox (specify target mailbox/folder)
     - Download in background (exports to .PST file)
  6. Advanced options (optional):
     - Restore: Changed items, Missing items
     - Flag: Mark restored as unread
     - Exclude folders: Drafts, Deleted Items, Hold Items
  7. Click "Restore" or "Download"

# Express Full Restore
# Available for: Express and Premium plans

Steps:
  1. Navigate: Microsoft 365 > Tenant > Restore > Outlook
  2. Select mailbox
  3. Click "Restore Selected Mailbox"
  4. Choose: "Express Full Restore"
  5. Restore point:
     - Latest available
     - Specific date/time
  6. Restore location:
     - Original location
     - New folder (creates "Recovered Items YYYY-MM-DD, HH:MM")
  7. Click "Express Restore"

# Express Granular Restore (search-based)
Advanced filters:
  - Sender: email address
  - Subject: keywords
  - Participants: email addresses
  - Attachments: items with attachments only

# Large Mailbox Downloads
# PST files split at 10GB each
# Example: 36GB mailbox = 4 PST files (10GB + 10GB + 10GB + 6GB) in ZIP
```

## Microsoft Azure Restore Operations

Restore Azure VMs, databases, and files to original or alternate locations with point-in-time recovery options.

```yaml
# Azure VM Restore Options

Entire VM Restore:
  1. Navigate: Azure > Tenant > Restore > VMs
  2. Select VM and restore point
  3. Restore mode:
     - Replace existing VM
     - Restore as new VM
  4. Settings:
     - Target resource group
     - VM name
     - Network configuration
  5. Complete restore

VM Disks Restore:
  1. Select VM > Restore Disks
  2. Choose restore point
  3. Select disks to restore
  4. Target storage account
  5. Complete restore

VM File-Level Restore:
  1. Select VM > File-Level Restore
  2. Choose restore point
  3. Browse file system
  4. Select files/folders
  5. Download or restore to VM

# Database Restore (SQL, Cosmos DB)
- Point-in-time restore
- Restore to original or alternate location
- Cross-region restore (where supported)

# Azure Files Restore
- Full share restore
- Folder-level restore
- File-level restore
```

## Salesforce Restore Operations

Restore Salesforce records, field values, files, and metadata with support for cross-tenant restore (production to sandbox).

```yaml
# Salesforce Restore Types

Record Restore:
  - Full record content restoration
  - All updatable/creatable fields
  - Associated attachments
  - Related object hierarchy (up to 10 levels)

Field Value Restore:
  - Restore specific field values only
  - Existing fields required
  - Metadata restore needed if field was deleted

File Restore:
  - Salesforce files
  - Attachments

Metadata Restore:
  - Custom objects and fields
  - Workflows and triggers
  - Page layouts

# Cross-Tenant Restore (Production to Sandbox)
Steps:
  1. Restore metadata first
  2. Manually enable required Salesforce features
  3. Install required external packages
  4. Restore records and files

# Restore Job Management
Operations:
  - Create restore job (saved as draft)
  - Edit draft
  - Start/stop job
  - Clone job
  - Remove draft
  - View job details

# Permission Requirements
Allowed roles:
  - OrganizationAdmin
  - Salesforce:Administrator
  - Salesforce:BackupOperator
  - Salesforce:RestoreOperator
```

## Searching Backups (Microsoft 365)

Use basic or advanced search to find specific items across Microsoft 365 backups for efficient restore operations.

```yaml
# Basic Search
# Supported: Exchange, SharePoint, OneDrive, Teams

Steps:
  1. Navigate: Microsoft 365 > Tenant > Search
  2. Search Within: Outlook, SharePoint, OneDrive, or Teams
  3. Select: Specific mailbox, site, drive, or team
  4. Restore Point: Select date/time
  5. Keyword: Enter search term
     - Outlook: matches email subject
     - SharePoint: matches site name or document content
     - OneDrive: matches file name
     - Teams: matches post subject
  6. Click "Search"
  7. Results: First 500 items displayed
  8. Click item > "Restore"

# Advanced Search
# Supports multiple criteria with OR logic

Steps:
  1. Navigate: Microsoft 365 > Tenant > Search > Advanced Search
  2. Search within: Outlook, OneDrive, SharePoint, or Teams
  3. Select specific container
  4. Choose restore point ("as at" date)
  5. Primary Search Criteria:
     - Category > Field > Condition > Value
     - Example: Email > Subject > Contains > "invoice"
  6. Secondary Search Criteria (optional):
     - Additional fields for broader search
  7. Click "Start Search"
  8. Wait for "Completed" status
  9. Click "Detail" to view results
  10. Select items > "Restore Selected Items"

# Search Tips
- Narrower criteria = faster results
- Large backups may take longer
- Primary + Secondary criteria linked with OR operator
```

## Connecting Veeam Data Cloud Vault with Veeam Backup & Replication

Integrate Veeam Data Cloud Vault as an object storage repository in Veeam Backup & Replication for hybrid backup scenarios.

```yaml
# VBR Integration Steps

In Veeam Backup & Replication Console:
  1. Open: Backup Infrastructure view
  2. Click: Backup Repositories > Add Repository
  3. Select: "Veeam Data Cloud Vault"
  4. Account step: Click "Authorize"
  5. Enter: Veeam My Account credentials
  6. Click: "Manage" to open Veeam Data Cloud

In Veeam Data Cloud Portal:
  1. Navigate: Vault > Select tenant
  2. Click: Storage Vaults
  3. Find vault > Click: "Assignments"
  4. Click: "Assign" next to VBR server name
  5. Confirm: Click "Continue"

Back in VBR Console:
  6. Click: Refresh icon
  7. Select: Storage vault from dropdown
  8. Complete: New Object Storage Repository wizard

# Prerequisites
- Active Veeam Data Cloud Vault subscription
- At least one storage vault created
- Veeam Backup & Replication v13 or later

# Supported Integrations
- Veeam Backup & Replication
- Veeam Backup for Microsoft Azure
- Veeam Kasten (Kubernetes)
```

## Organization Dashboard

Monitor data protection across all workloads from a centralized dashboard showing protection status, backup sessions, and recent activity.

```yaml
# Dashboard Sections

Protected Objects:
  - Ratio: protected vs total objects in backup policies
  - Object definition: smallest backup unit (mailbox, site, user, etc.)
  - Protected: restore point created within RPO

Tenants:
  - Count of tenants in current view

Unprotected Objects:
  - Objects without restore point within defined RPO

Data Protection History:
  - Statistics over 7, 30, or 90 days
  - Grouped by status: Success, Warning, Error
  - Toggle: Objects view or Sessions view

Recent Activity:
  - List of recent backup sessions
  - Link to full activity view

# Filtering Options
Workload Filter: All Workloads / Microsoft 365 / Entra ID / Salesforce
Tenant Filter: All Tenants / Specific tenant selection
Clear All: Remove all filters

# Access Requirements
Role: OrganizationAdmin

# Supported Workloads
Currently: Microsoft 365, Microsoft Entra ID, Salesforce
Coming: Microsoft Azure
```

## Organization Activity Monitoring

Track backup sessions and audit events across all workloads from a unified activity view with filtering and search capabilities.

```yaml
# Activity View

Backup Sessions:
  - View all backup sessions across workloads
  - Filter by: Status, Workload, Tenant, Date range
  - Session details: Start time, duration, objects processed

Audit Logs:
  - User actions and system events
  - Filter by: Event type, User, Date range
  - Export audit logs

# Access Requirements
Roles required (one of):
  - OrganizationAdmin
  - OrganizationViewer + workload admin role(s)

# Supported Workloads
- Microsoft 365
- Microsoft Entra ID
- Salesforce

# Session Status Types
Success: Backup completed successfully
Warning: Backup completed with issues (may affect restore points)
Error: Backup failed
```

## Microsoft Entra ID Protection

Back up and restore Microsoft Entra ID objects including users, groups, applications, Conditional Access policies, and Intune configurations.

```yaml
# Supported Operations

Backup:
  - Entra ID tenant objects
  - Audit and sign-in logs

Restore Objects:
  - Users
  - Groups
  - Administrative units
  - Roles
  - Applications
  - Service principals
  - Conditional Access policies
  - Microsoft Intune policies

Restore Properties:
  - Individual properties of backed-up objects

Export:
  - Audit and sign-in logs
  - Objects to JSON format:
    - Users, Groups, Administrative units
    - Roles, Applications, Service principals
    - Conditional Access policies, Intune policies
    - Organization contacts
```

## Summary

Veeam Data Cloud serves as a comprehensive backup-as-a-service platform for organizations managing multiple cloud workloads. The primary use cases include protecting Microsoft 365 environments (Exchange, SharePoint, OneDrive, Teams), safeguarding Azure infrastructure (VMs, SQL, Files, Cosmos DB), backing up Microsoft Entra ID configurations and policies, and protecting Salesforce data with full record and metadata recovery capabilities. The centralized dashboard and activity monitoring provide visibility across all protected workloads for efficient management.

Integration patterns focus on connecting cloud tenants through automated or manual authentication, with role-based access control enabling granular permissions per workload and tenant. Veeam Data Cloud Vault extends the platform's capabilities by providing cloud storage integration with on-premises Veeam Backup & Replication deployments, enabling hybrid backup architectures. Organizations typically start by adding their cloud tenants, configuring backup policies (either automatically created or manually customized), and then leveraging the restore and search capabilities for data recovery operations.