With the release of Veeam Backup for Microsoft 365 v6, we brought to market one of the most heavily requested features across all products at Veeam. That is the Self-Service Portal. The self service portal can be leveraged for Enterprises but is mainly aimed at our Cloud and Service Provider Partners who didn’t have the in house capability to design and build their own portals leveraging our API and PowerShell automation endpoints. Whenever you’re dealing with a Self Service Portal the steps to get things configured can be confusing (specially with AzureAD and Modern Authentication is involved). With that, in the video below, I show off the end to end onboarding of a customer is done including the multi-tenancy portion of the setup.

With the release of #Veeam Backup for #Microsoft 365 v6 the Self Service Portal was also unleashed. In this video we run through a scenario where a new tenant is being onboarded from the Service Provider point of view as well as what steps need to be actioned by the tenants.

Bearing in mind this can be done for both Service Providers an Enterprises. From a Service Provider perspective the use case is fairly easy to understand. As tenant’s you want individual users to be able to log into a self-service portal and access their own emails restore points for recovery. This can be done at the individual user level or using the new operator role which offers a level of role based access control to be able to change the scope of the recovery and perform restores on a users behalf.

To best illustrate the process, I’ve created the video below with a bit of role-playing going on. In the video, I am acting as a Service Provider, and I’ve asked Wayne Heath from Zettagrid to play the role of the tenant. In the video will be using a number of automation scripts that have been released from Veeam automation guru Chris Arceneaux and will also be citing a blog post series from Jorge De la Cruz.

The steps involved are listed below as part of the video chapter breakdown with links to the various section on YouTube.

  • Intro (0:00)
  • Service Provider Step: Add New Tenant with Modern Authentication (01:20)
  • Tenant Step: Authentication against Azure Device Code (2:25)
  • Service Provider Step: Create Restore Operator Role for Tenant (7:27)
  • Service Provider Step: Send Configuration PowerShell Script to Tenant (10:52)
  • Tenant Step: Run Configuration #PowerShell Script (11:42)
  • Wrap Up (14:24)

References:

https://github.com/VeeamHub/powershell/tree/master/VB365-RestorePortalSetup

https://jorgedelacruz.uk/2022/03/31/veeam-how-to-restrict-the-login-to-certain-users-to-the-restore-portal-from-veeam-backup-for-microsoft-365-v6/