Veritas Alta™ SaaS Protection Administrator's Guide
- Introduction to Veritas Alta™ SaaS Protection
- Active Directory synchronization
- Manage users and roles
- API permissions
- Add connectors
- Overview of adding connectors
- Add Exchange Online connectors
- Configure the capture scope for Exchange connectors
- Configure the capture scope for Exchange connectors
- Add SharePoint Online connectors
- Configuring the capture scopes for SharePoint connectors
- Add Teams site collections connectors
- Add OneDrive connectors
- Add Teams chat connectors
- Add Audit Log connectors
- Add Google Drive connectors
- Add Gmail connectors
- About the Salesforce connector
- Add Entra ID (Azure AD) connectors
- Add Box connectors
- Add Email/Messages
- Apps Consent Grant Utility
- Add Retention policies
- Perform backups
- Manage backed-up data
- Perform restores using Administration portal
- Restore SharePoint/OneDrive/Teams Sites and data
- Restore Teams chat messages and Teams channel conversations
- Restore Box data
- Restore Google Drive data
- About the Salesforce Data, Metadata, and CRM Content restore
- Limitations of Salesforce Metadata backup and restore
- About Entra ID (Azure AD) objects and records restore
- Perform restores using Export Utility
- Restore dashboard
- Install services and utilities
- Discovery
- Add Tagging polices
- Add Tiering policy
- General administrative tasks
- Manage Stors (Storages)
- Managing Scopes
- Known Issues
Configuring service accounts for services and utilities
Typically, there are two different account types used to configure each service,
A Windows domain or local computer account that you to be used to run this service.
An Azure account that has the appropriate access in .
For ease of use, the following service accounts are created as part of the provisioning process.
Connector service account
Retrieval service account
Full admin account
This information will be provided by the support team during the post-provisioning call.
If you do not want to use the default service accounts, you can create your own accounts with the correct permissions as described in the Authorizations required for the service account table. If you create your own accounts, you could use the same account to run the service and connect to .
The service account must be authorized with the following permissions :
Table: Authorizations required for the service account
Services and utilities | Authorizations in | Authorizations in customer's domain |
---|---|---|
Connector service |
|
Note: The File copy utility and the Retrieval service require permissions. |
Export service |
| |
Retrieval service |
| |
Export utility | For the administrator:
For the end user:
| |
File copy utility |
| |
Apps Consent Grant utility | Global Administrator |
Table: Authorizations required for the service accounts in Windows
Services and utilities | Windows Permissions when running the service |
---|---|
Connector service |
If running a Connector for File System Archiving:
|
Export service |
|
Retrieval service |
|
To configure a service account for services and utilities
- Open a web browser and access the Administration portal.
- Click Administration.
- On the left, expand Permissions > Users and groups.
- Click Refine search.
- In the Refine search window, enter the user account, and then click Run search.
- Click Manage permissions.
- In the Manage permissions window, select the required permissions for the service account and then click Assign.