How to Create Log Backup Repositories with Microsoft Azure Blob Storage to Backup Azure Entra ID

A log backup repository is a storage area where Veeam Backup for Microsoft Entra ID keeps backups of audit and sign-in logs from protected Microsoft Entra ID tenants.

To boost log availability and ensure that data can be recovered during a disaster, backup data for audit and sign-in logs can be stored in primary and secondary log backup repositories, each with its own retention policy and encryption settings.

You can create Directly attached storage with a hardened Linux server, deduplicating storage appliance, repositories with rotated drives, object storage repositories, and scale-out backup repositories. as the cache repositories.

This section describes creating a log backup repository with Microsoft Azure blob storage.

You need to have an Azure storage account before this process.

1. Login to the Veeam Backup and Replication Manager server.

2. Open the Veeam Backup & Replication Console and click Connect.

3. Enter the MFA Confirmation code and click Confirm.

4. Select Credentials & Password and click Cloud Credentials.

5. On the Manage Cloud Credentials page, Click Add and select Microsoft Azure storage account (shared key).

6. Enter the storage account name in the Account field on the Credentials page.

7. Enter the storage account shared key in the Shared key field.

8. Enter a description for the credential in the Description field.

9. Click OK on the Credentials page.

10. Click OK on the Manage Cloud Credentials page.

11. On the Home page, select Backup Infrastructure.

12. Right-click Backup Repositories and select Add backup repository.

13. Select Object storage on the Add Backup Repository page.

14. Select Hyperscalers on the Object Storage page.

15. On the Hyperscalers page, select Microsoft Azure Storage.

16. On the Microsoft Azure Storage page, select Azure Blob Storage.

17. Enter the object storage name in the Name field on the Name page.

18. Enter the object storage description In the Description field and click Next.

19. Select the credential in the Credentials field on the Account page.

20. Select Azure Global (Standard) in the Region field.

21. Keep the Direct in the Connection mode field.

22. Click Next.

23. Select a container in the Container field on the Container page.

24. In the Folder field, click Browse.

25. On the Folders page, select the container and click New Folder.

26. Enter the name for the new folder, select the folder and click OK.

27. Click Next on the Container page.

28. Select a mount server or keep the default setting in the Mount server field on the Mount Server page.

29. Select or keep the default setting in the Instant recovery write cache folder field.

30. Unselect Enable vPower NFS service on the mount server (recommended) because vPower NFS settings are not applicable in the Microsoft Hyper-V environment.

31. Click Configure in the Helper appliance field.

32. Select your subscription in the Subscription field on the Helper Appliance Settings page.

33. Select helper appliance size in the Size field.

34. Create a new or select an existing resource group in the Resource group field.

35. Create a new or select an existing virtual network in the Virtual network field.

36. Create a new or select an existing subnet in the Subnet field.

37. Change or keep the default port number in the Redirect port field.

Note:

Veeam Backup & Replication creates a default network security group within a virtual network with inbound rules that allow connection using the 443 and 22 ports from everywhere (0.0.0.0/0).

38. Click OK.