TERRA CLOUD Veeam Data Protection Troubleshooting
Protection Portal
Retrieving details on Microsoft 365 backup job warnings and errors | "Contact your service provider for assistance"
For Microsoft 365 backup jobs, the Protection Portal does not display details regarding warnings or errors under "Job Status" in the "Backup Jobs" section.
You will only see the message "Contact your service provider for assistance," as shown in the example below:
Cause:
The Veeam Backup for Microsoft 365 server is operated by TERRA CLOUD as part of the TERRA CLOUD Veeam Data Protection product and is classified as a "hosted location" within the Protection Portal.
Consequently, Veeam has hidden the specific details for resellers and companies in this view. Wortmann AG has already submitted a feature request to Veeam regarding this matter.
Solution:
You can view the precise error message and details regarding warnings and errors elsewhere in the Protection Portal.
To do this, please use the "Session States" overview found in the "Analytics" section. Simply select the entry highlighted in yellow or red within the calendar.
Tip:
Common error scenarios are documented in this wiki section; we therefore recommend first searching the other articles in this troubleshooting section.
Please contact TERRA CLOUD Support if there is no existing article covering your specific error scenario.
Veeam Backup for Microsoft 365 Plug-in
Error adding an organization: "You do not have access to this"
Error:
You receive the following error message when adding a Microsoft 365 organization in the Microsoft 365 plug-in:
Cause:
A Microsoft Entra ID Conditional Access policy [1] is blocking the code login (Device Code Flow) of Veeam Backup for Microsoft 365.
Solution:
Adjust the Conditional Access policy so that the user used to register the Microsoft 365 organization is allowed to use the Device Code Flow.
For more information about the device code flow, see this article in the Microsoft documentation.
Microsoft 365 Backup
Failed to access public folders.. There are no public folder server available.
Error pattern':
You receive the following error message for your Microsoft 365 backup job:
Cause:
The user stored in the Entra ID application for Microsoft 365 data backup cannot be used for impersonation in Exchange Online Web Services.
Therefore, a backup of public folders is not possible.
For impersonation, the user requires an Exchange Online license and one of the required roles: "Exchange Administrator" or "Global Administrator".
Solution:
Please check the configured user in the Entra ID application in the Veeam Backup for Microsoft 365 plug-in in the Protection Portal.
When linking the organization, the user specified during setup is initially stored here.
You can either change the stored user using the following instructions or assign a license and, if necessary, authorize the existing user in the Microsoft 365 Admin Center.
Configuring the user for impersonation:
- In the Protection Portal, click the gear in the upper right corner to access the configuration.
- Select the Veeam Backup for Microsoft 365 plug-in.
- In the "Organizations" section, edit the desired tenant using "Edit."
- Click the ID in the "Application settings" section.
- Enter the desired user in the "Exchange Online Web Services configuration" section and confirm the change using "Apply."
Processing mailbox <Name> completed with warning: Cannot protect a group mailbox because the group doesn't have an owner
Error:
You receive the following warning message for your Microsoft 365 backup job:
Cause:
Backing up Microsoft group mailboxes via Veeam Backup for Microsoft 365 is only possible if an owner is assigned to this group. Without this assignment, [2] impersonation is not possible.
This is a known issue with Microsoft and Veeam.
Solution:
Please assign an owner to the groups listed in the warning message. For instructions, see this Microsoft article.
No valid license for the tenant exists
Error Image:
You receive the following error message for your Microsoft 365 backup job:
[Error] Failed to process team: […] “No valid license for the tenant exists”
Cause:
There is currently no valid M365 Business license within your organization.
You can view this in the Microsoft Admin Center of the affected customer under the “Your Products” tab.
This error is caused by an expired or invalid license:
Solution:
Reactivate your existing Microsoft 365 license or purchase a new one and assign it to the affected organization.
Our Microsoft CSP team is happy to answer any questions you may have.
Exchange EWS Anonymous | Failed to access mailbox… The HTTP request was forbidden
Error Symptom:
You receive the following error message for your Microsoft 365 backup job:
Cause:
Due to a change by Microsoft regarding EWS authentication in Exchange Online, EWS access is now supported only if explicitly enabled.
If EWS is not enabled at the organization or mailbox level, Veeam backups of individual mailboxes may fail with an HTTP 403 error.
Veeam has published this article in its Knowledge Base regarding this issue.
Solution:
Please verify that Exchange Web Services (EWS) are enabled at both the organization and mailbox levels.
If necessary, enable EWS access via PowerShell. Detailed instructions, including the required PowerShell commands, can be found in the previously linked Veeam article.
Microsoft 365 Wiederherstellung
Problems adding the Restore Portal Application in Entra ID
Error:
When running the application Connect-VB365RestorePortal, you receive an error message when adding the Restore Portal Application or assigning permissions for it.
The Entra ID Enterprise Application of the TERRA CLOUD Veeam Data Protection Restore Portal must be added and authorized once before a restore can be performed.
Instructions for manually adding the Restore Portal Application:
1. Start PowerShell as an administrator.
2. Install the Microsoft Graph module.
Install-Module Microsoft.Graph
3. Run the "Connect-AzureAD" cmdlet to launch a login dialog for Entra ID.
Connect-AzureAD
4. Please log in to a user with the "Global Administrator" role in the Microsoft 365 tenant for which the application is to be added.
5. Add the Entra ID Enterprise Application using the "New-AzureADServicePrincipal" cmdlet.
New-AzureADServicePrincipal -AppID "c3a749b0-ec1f-4b2b-af40-316172f7d71a"
6. Open the Microsoft Entra ID Admin Center and search for a corporate application named "TERRA CLOUD Veeam Data Protection - Restore Portal" (remove the filter if necessary).
7. Grant administrator permission for the desired tenant in the "Security --> Permissions" section (see screenshot below).
8. Check whether logging in to the Restore Portal is now possible.
