TERRA CLOUD Veeam Data Protection Fehlerdiagnose/en

Veeam Backup for Microsoft 365 Plug-in

Error adding an organization: "You do not have access to this"

Error:
You receive the following error message when adding a Microsoft 365 organization in the Microsoft 365 plug-in:

Cause:
A Microsoft Entra ID Conditional Access policy [1] is blocking the code login (Device Code Flow) of Veeam Backup for Microsoft 365.

Solution:
Adjust the Conditional Access policy so that the user used to register the Microsoft 365 organization is allowed to use the Device Code Flow.
For more information about the device code flow, see this article in the Microsoft documentation.

Backup

Failed to access public folders.. There are no public folder server available.

Error pattern':
You receive the following error message for your Microsoft 365 backup job:


Cause:
The user stored in the Entra ID application for Microsoft 365 data backup cannot be used for impersonation in Exchange Online Web Services.
Therefore, a backup of public folders is not possible. For impersonation, the user requires an Exchange Online license and the required permissions.

Solution:
Please check the configured user in the Entra ID application in the Veeam Backup for Microsoft 365 plug-in in the Protection Portal.
When linking the organization, the user specified during setup is initially stored here.
You can either change the stored user using the following instructions or assign a license and, if necessary, authorize the existing user in the Microsoft 365 Admin Center.

Configuring the user for impersonation:

1. In the Protection Portal, click the gear in the upper right corner to access the configuration.
2. Select the Veeam Backup for Microsoft 365 plug-in.
3. In the "Organizations" section, edit the desired tenant using "Edit."
4. Click the ID in the "Application settings" section.
5. Enter the desired user in the "Exchange Online Web Services configuration" section and confirm the change using "Apply."

Processing mailbox <Name> completed with warning: Cannot protect a group mailbox because the group doesn't have an owner

Error:
You receive the following warning message for your Microsoft 365 backup job:

Cause:
Backing up Microsoft group mailboxes via Veeam Backup for Microsoft 365 is only possible if an owner is assigned to this group. Without this assignment, [2] impersonation is not possible.
This is a known issue with Microsoft and Veeam.

Solution:
Please assign an owner to the groups listed in the warning message. For instructions, see this Microsoft article.

Recovery

Problems adding the Restore Portal Application in Entra ID

Error:
When running the application Connect-VB365RestorePortal, you receive an error message when adding the Restore Portal Application or assigning permissions for it.
The Entra ID Enterprise Application of the TERRA CLOUD Veeam Data Protection Restore Portal must be added and authorized once before a restore can be performed.

Instructions for manually adding the Restore Portal Application:
1. Start PowerShell as an administrator.
2. Install the Microsoft Graph module.

Install-Module Microsoft.Graph

3. Run the "Connect-AzureAD" cmdlet to launch a login dialog for Entra ID.

Connect-AzureAD

4. Please log in to a user with the "Global Administrator" role in the Microsoft 365 tenant for which the application is to be added.
5. Add the Entra ID Enterprise Application using the "New-AzureADServicePrincipal" cmdlet.

New-AzureADServicePrincipal -AppID "c3a749b0-ec1f-4b2b-af40-316172f7d71a"

6. Open the Microsoft Entra ID Admin Center and search for a corporate application named "TERRA CLOUD Veeam Data Protection - Restore Portal" (remove the filter if necessary).
7. Grant administrator permission for the desired tenant in the "Security --> Permissions" section (see screenshot below).
8. Check whether logging in to the Restore Portal is now possible.