Veritas Alta™ SaaS Protection Administrator's Guide
- Introduction to Veritas Alta™ SaaS Protection
- EDB and EDB compliance
- Active Directory synchronization
- Manage users and roles
- API permissions
- Add connectors
- Overview of adding connectors
- Add Exchange Online connectors
- Configure the capture scope for Exchange connectors
- Configure the capture scope for Exchange connectors
- Add SharePoint Online connectors
- Configuring the capture scopes for SharePoint connectors
- Add Teams site collections connectors
- Add OneDrive connectors
- Add Teams chat connectors
- Add Audit Log connectors
- Add Google Drive connectors
- Add Gmail connectors
- About the Salesforce connector
- Add Entra ID (Azure AD) connectors
- Add Box connectors
- Add Email/Messages
- Apps Consent Grant Utility
- Add Retention policies
- Perform backups
- Manage backed-up data
- Perform restores using Administration portal
- Restore SharePoint/OneDrive/Teams Sites and data
- Restore Teams chat messages and Teams channel conversations
- Restore Box data
- Restore Google Drive data
- About the Salesforce Data, Metadata, and CRM Content restore
- Limitations of Salesforce Metadata backup and restore
- About Entra ID (Azure AD) objects and records restore
- Perform restores using Export Utility
- Restore dashboard
- Install services and utilities
- Discovery
- Add Tagging polices
- Add Tiering policy
- General administrative tasks
- Manage Stors (Storages)
- Managing Scopes
- Known Issues
API permissions for SharePoint, OneDrive for Business, and Teams Sites Collections
If you use the M365 App Registrations mode to configure connectors for your SharePoint, OneDrive for Business, and Teams Sites Collections workloads, Veritas Alta SaaS Protection must have the API permissions listed in the following table. A single app has all the following permissions assigned to the workload being backed up by the connector.
Table: List of API permissions required for SharePoint, OneDrive for Business, and Teams Sites Collections for backup and restore
Used by Veritas Alta SaaS Protection: | ||||
---|---|---|---|---|
Microsoft Graph | Sites.ReadWrite.All | Read and write items in all site collections. | Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user. | To fetch list items from lists in SharePoint sites/Teams sites and One Drives during incremental backups. |
Directory.Read.All | Read directory data. | Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user. | To fetch channel information for backup and restore of Teams Wikis. | |
User.Read.All | Read all user's full profiles. | Allows the app to read user profiles without a signed in user. | To fetch owners information for teamsites. | |
Office 365 SharePoint Online | User.ReadWrite.All | Read and write user profiles. | Allows the app to read and update user profiles and to read basic site info without a signed-in user. | To query user profile service for list of users during backup (applicable only for Basic auth). |
TermStore.ReadWrite.All | Read and write managed metadata. | Allows the app to write enterprise-managed metadata and to read basic site info without a signed-in user. | To backup and restore managed metadata for SharePoint list items. | |
Sites.Manage.All | Read and write items and lists in all site collections. | Allows the app to read, create, update, and delete document libraries and lists in all site collections without a signed in user. | To create SharePoint lists during restore. | |
Sites.ReadWrite.All | Read and write items in all site collections. | Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user. | To backup, restore, and stub list items SharePoint sites/Teams sites and One Drives. | |
Sites.FullControl.All | Have full control of all site collections. | Allows the app to have full control of all site collections without a signed-in user. | To backup and restore role assignments of objects in SharePoint sites/Teams sites and One Drives Capture ACLs for various SharePoint objects. |