Veritas Alta™ SaaS Protection Administrator's Guide

Last Published:
Product(s): Veritas Alta SaaS Protection (1.0)
  1. Introduction to Veritas Alta™ SaaS Protection
    1.  
      About Veritas Alta SaaS Protection
    2.  
      Features of Veritas Alta SaaS Protection
    3.  
      Architecture of Veritas Alta SaaS Protection
    4.  
      SaaS applications supported for data protection
    5. Administration portal
      1.  
        Accessing the Administration portal
      2.  
        Analytics
      3.  
        About the System page
  2. Add users and roles
    1.  
      About permissions
    2. Permissions tab
      1.  
        Users and groups page
      2.  
        Roles page
      3.  
        Unrecognized users page
      4.  
        Access grants page
      5.  
        Settings page
    3.  
      Add users
    4.  
      Assign the Default role to users
    5.  
      Add roles
    6.  
      Assign permissions
    7.  
      The allowed list of the unrecognized retrieval users
  3. API permissions
    1.  
      API permissions for the Exchange Online
    2.  
      API permissions for SharePoint, OneDrive for Business, and Teams Sites Collections
    3.  
      API permissions for Teams chat
    4.  
      API permissions for Gmail and Google Drive
  4. Add connectors
    1. Overview of adding connectors
      1.  
        Configuring the general settings
      2.  
        Filtering users based on Entra ID (Azure AD) extended attributes
      3.  
        Filtering users based on Entra ID (Azure AD) group membership
      4.  
        Filtering folders
      5.  
        Points to consider when configuring the Custom backup policy
      6.  
        Configuring Custom backup policy
    2.  
      Features of connectors
    3.  
      Connectors page
    4.  
      Connector status
    5.  
      Support matrix for Microsoft 365 connectors
    6. Add Exchange Online connectors
      1. Configure the capture scope for Exchange connectors
        1.  
          Configure the capture scope to back up mailboxes of all users
        2.  
          Configure the capture scope to back up mailboxes of all users using the Rolling mailbox scope option
        3.  
          Configure the capture scope to back up the mailboxes of users using the Alphabetical mailbox scope option
        4.  
          Configure the capture scope to back up the mailboxes of specific users only
        5.  
          Configure the capture scope to back up mailboxes from specific domains only
        6.  
          Configure the capture scope to back up Group/Teams mailboxes
        7.  
          Configure the capture scope to back up Public folders
    7. Add SharePoint Online connectors
      1. Configuring the capture scopes for SharePoint connectors
        1.  
          Configuring the capture scope to back up all SharePoint site collections
        2.  
          Configuring the capture scope to back up specific SharePoint sites only
        3.  
          Configuring the capture scope to back up only specific sites using the Rolling site collection scope option
      2.  
        Points to consider when configuring Delete policy for SharePoint environments
      3.  
        Points to consider when configuring Stubbing policies for SharePoint environments
    8. Add Teams site collections connectors
      1. Configure the capture scopes for Teams site connectors
        1.  
          Configure the capture scope to back up all Team site collections
        2.  
          Configure the capture scope to back up specific Team sites only
        3.  
          Configure the capture scope to back up only specific Team sites using the Rolling site collection scope option
    9. Add OneDrive connectors
      1. Configure the capture scope for OneDrive for Business connectors
        1.  
          Configure the capture scope to back up all OneDrive site collections
        2.  
          Configure the capture scope to back up specific OneDrive sites only
        3.  
          Configure the capture scope to back up only specific OneDrive sites using the Rolling site collection scope option
    10. Add Teams chat connectors
      1.  
        Configure the capture scope for Teams chat connectors
    11.  
      Configure credentials using the Manual mode
    12.  
      Assign M365 apps to M365 connectors
    13.  
      Status of the M365 apps
    14.  
      Recovery of M365 apps
    15.  
      Approve M365 apps manually
    16.  
      Approve M365 apps using the App Consent Grant utility
    17.  
      Add Audit Log connectors
    18.  
      Support matrix for Google connectors
    19. Add Google Drive connectors
      1.  
        Configure the capture scope for Google Drive connectors
    20. Add Gmail connectors
      1.  
        Configure backup scopes for Gmail data
    21. Add Salesforce connectors
      1.  
        About the Salesforce connector
      2.  
        Prerequisites to add Salesforce connectors
      3.  
        About the Salesforce connector backup process
      4.  
        Upload a certificate to the Salesforce organization
    22.  
      Add Entra ID (Azure AD) connectors
    23. Add Box connectors
      1.  
        Configure backup scopes for Box data
    24.  
      Add Slack connectors
    25. Add Email/Messages
      1.  
        Prerequisite
      2.  
        Adding EML/Messages connectors
    26.  
      Edit connectors
    27.  
      Delete connectors
  5. Apps Consent Grant Utility
    1.  
      About the Apps Consent Grant Utility
    2.  
      Prerequisites to download and install the Apps Consent Grant Utility
    3.  
      Downloading the Apps Consent Grant Utility
    4.  
      Installing or upgrading the Apps Consent Grant Utility
    5.  
      Post-installation activities for the Apps Consent Grant Utility
  6. Add Retention policies
    1.  
      About WORM policies
    2.  
      Ingestion WORM policies page
    3.  
      Guidelines to add retention policies
    4.  
      Add/edit ingestion WORM retention policies
    5.  
      Add/edit At-Rest WORM retention policies
    6.  
      About the Deletion policy
    7.  
      Add/edit Deletion policies
    8.  
      View deletion history
    9.  
      How to edit the policy evaluation interval?
  7. Perform backups
    1.  
      Perform an on-demand/ad-hoc backup
    2. View backup events
      1.  
        About Event suppression
      2.  
        Create event suppression rules
    3.  
      Viewing backup tasks details
  8. Manage backed-up data
    1.  
      Browse backed-up data
    2. Share data
      1.  
        Remove data sharing
  9. Backup limitations
    1.  
      Limitations for SharePoint Online connector
    2.  
      Limitations for Teams site collections connector
    3.  
      Limitations for Teams chat connector
    4.  
      Limitation for Google Drive connector
    5.  
      Limitations for Entra ID connector
    6.  
      Limitations for Box data backup
  10. Perform restores using Administration portal
    1.  
      About restore
    2.  
      Prerequisites for restore
    3.  
      Restore Exchange Online mailboxes
    4. Restore SharePoint/OneDrive/Teams Sites and data
      1.  
        Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      2.  
        Limitations of SharePoint Online data and sites restore
    5. Restore Teams chat messages and Teams channel conversations
      1.  
        Limitations of Teams chat data restore
    6.  
      Restore O365 audit logs
    7. Restore Box data
      1.  
        Limitations of Box data restore
    8. Restore Google Drive data
      1.  
        About the overwrite restore behavior for Box/Google Drive data
    9.  
      Restore Gmail data
    10. About the Salesforce Data, Metadata, and CRM Content restore
      1.  
        Restore Standard and Custom objects (Structured data)
      2.  
        Custom Object restore - post processing steps
      3.  
        Restore specific Records (Structured data) using Query filters
      4.  
        Restore Salesforce CRM Content (Unstructured data)
      5.  
        Limitations of Salesforce Data restore
      6.  
        Considerations for Salesforce Metadata restore
      7.  
        Restore Salesforce Metadata
      8. Limitations of Salesforce Metadata backup and restore
        1.  
          Salesforce Objects not supported for restore
    11. About Entra ID (Azure AD) objects and records restore
      1.  
        Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restore an Entra ID object
      4.  
        Restore specific records within Entra ID objects
    12.  
      Restore Slack data
    13.  
      Restore data to File server
    14.  
      Set the default restore point
    15.  
      Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
    16.  
      Configure email addresses for notifications
    17.  
      Downloading an item
  11. Restore dashboard
    1.  
      About the Restore dashboard
    2.  
      Restore job statuses
    3.  
      How to cancel the restore job?
    4.  
      View the restore events
  12. Add Tiering policy
    1. About the Tiering policy
      1.  
        Storage tiering and full-text search
      2.  
        User experience on storage tiering
      3.  
        Priority for storage Tiering
    2.  
      Add/edit Tiering policies
  13. Add Tagging polices
    1.  
      About the Tagging policy
    2.  
      Add Tags
    3.  
      Add/edit Tagging policies
    4. Adding regular expressions
      1.  
        RegEx and query examples for PII detection
  14. Discovey
    1.  
      About eDiscovery/searches
    2.  
      Add search templates
    3.  
      Add Discovery cases
    4.  
      Perform ad hoc search and add data to Discovery cases
    5.  
      View data in Discovery cases
    6.  
      Edit Discovery cases
    7.  
      DeleteDiscovery cases
    8.  
      Assign Discovery cases to users
  15. General administrative tasks
    1.  
      View upgrade history
    2.  
      Configure the Administration portal
    3.  
      About auditing
  16. Manage Stors (Storages)
    1.  
      Viewing Stors (Storages)
    2.  
      Requesting a new Stor
    3.  
      General tab
    4.  
      Metadata tab
    5.  
      Statistical policies tab
    6.  
      Location-Mapping tab
    7.  
      Backup tab
    8.  
      Custodian Groups tab
    9.  
      Advanced tab
    10.  
      Analytics tab
  17. Managing Scopes
    1.  
      About Scopes
    2.  
      Enabling Scopes
    3.  
      Configuring Scopes
    4.  
      Using Scopes
  18. Known Issues
    1.  
      Know Issues

Add SharePoint Online connectors

The following are the key features of Veritas Alta SaaS Protection SharePoint Online connector:

Key features:
  • Backup capability

    You can backup and restore the following for SharePoint Online items:

    • Documents

    • List items

    • Versions

    • Site pages

    • Site collections

    • Sub-site settings

    • Site and sub-site columns

    • Site and sub-site content types

    • List settings

    • List columns

    • List content types

    • Permission objects such as groups

    • Role definitions

    • Role assignments

  • Custom backup policy

    Define specific data types, versions, permissions, columns, and content types to back up.

  • Delete policy

    Define a Delete policy to manage storage by removing unnecessary items from the source SharePoint Online environment while retaining backups in Veritas Alta SaaS Protection.

  • Stubbing policy

    Define a Stubbing policy to replace original items with stubs (shortcuts) in SharePoint Online environment, which helps reduce storage usage while maintaining access to data.

The SharePoint connector can back up all SharePoint site collections that are not associated with Microsoft 365 Group and Team sites (excluding the Communication sites). The Microsoft 365 Group and Team data can be backed up using the Teams site collection connector using the All group and team site collections option.

To add a SharePoint Online connector

  1. Access the Administration portal.

    The home page of the Administration portal is displayed.

  2. Click Administration.
  3. On the left, click Connectors.
  4. Click + New Connector.
  5. Click SharePoint.
  6. Do the following to configure the general settings for the connector:
    • In the Connector name field, enter a name for a connector.

      The Type field displays the connector type.

    • The Stor dropdown list shows the designated storage for storing the backed-up data. If you want to change the Stor, you must contact Veritas Support.

    • The Machine field displays the Connector service to host this connector. If required, you can select the appropriate one from the list.

      You must contact Veritas Support for this change.

    • Optionally, enable the Enable email notification option if you want to receive notifications when the predefined error count threshold is exceeded during the backup process. Enabling this option adds an additional tab, Email notification, to the job creation workflow.

    • Click Next.

  7. Configure the capture scope.
  8. Configure credentials.
  9. Configure the custom backup policy.

    See Configuring Custom backup policy .

  10. If you want to configure the Delete policy, click Enable this feature and on the Delete policy section, do the following:

    Important: Before enabling the Delete policy, you must read the SharePoint Delete policy guidelines to understand its implications. See Points to consider when configuring Delete policy for SharePoint environments .

    • Select the Items <Last modified> date older than <--> days check box.

    • Enter the number of days to specify the modified items that must be backed up.

      Note:

      This option is applied regardless of the items' size and type.

    • Select the Items size larger than __<--> check box to back up the items that are larger than the specified size.

      Note:

      This option is applied regardless of the items' last modified date and type.

    • Select the <Include/Exclude>items of type <Enter a file extension> check box and enter the extensions that should be included or excluded.

      Note:

      This option is applied regardless of the items' Last modified status and size.

      Note:

      This option is not applicable to the Google Drive connector.

    • Use the Locations to exclude option to exclude specific folders.

      Any folder that matches the provided name is excluded from the backup with its subfolders. The matching process is case-insensitive, and wildcards can be used.

      The exclusion criteria that is set in the Folder filter section for this connector take precedence over the criteria that is set here.

      • Click +Add location.

      • On the Location name page, enter the name of the folder that is to be excluded.

      • Click Add.

      The folders to be excluded are listed at the bottom of this section.

  11. If you want to configure the Stubbing policy, on the Stubbing policy section, do the following:

    Important: Before enabling the Stubbing policy, you must read the SharePoint Stubbing policy guidelines to understand its implications. See Points to consider when configuring Stubbing policies for SharePoint environments.

    • Select the Items <Last modified> date older than <--> days check box.

    • Enter the number of days to specify the modified items that must be backed up.

      Note:

      This option is applied regardless of the items' size and type.

    • Select the Items size larger than __<--> check box to back up the items that are larger than the specified size.

      Note:

      This option is applied regardless of the items' last modified date and type.

    • Select the <Include/Exclude> items of type <Enter a file extension> check box and enter the extensions that should be included or excluded.

      Note:

      This option is applied regardless of the items' Last modified status and size.

      Note:

      This option is not applicable to the Google Drive connector.

    • Use the Locations to exclude option to exclude specific folders.

      Any folder that matches the provided name is excluded from the backup with its subfolders. The matching process is case-insensitive, and wildcards can be used.

      The exclusion criteria that is set in the Folder filter section for this connector take precedence over the criteria that is set here.

      • Click +Add location.

      • On the Location name page, enter the name of the folder that is to be excluded.

      • Click Add.

      The folders to be excluded are listed at the bottom of this section.

  12. Click Next.
  13. (Optional) Do the following to configure the next backup schedule:
    • Click + Add task.

    • On the Add task page, do the following:

      • Enter the time to start the backup in the Local start time field.

      • Enter the time duration in hours in the Duration in hours field. The backup stops if it exceeds the allotted time.

        In such a case, on the next backup, the remaining items from the previous backup and the new items are backed up.

      • Set the recurrence option for the backup schedule Recurrence section.

      • Click Add.

  14. Click Next.

    (Optional) If you have enabled the Enable email notification options option while configuring the general settings to receive notifications, do the following:

    • Click Enable this feature > enter the email address.

    • Select the Send an email when error count exceeds check box > enter the number.

    • Click Next.

  15. Do any of the following:
    • Click the corresponding Edit option to edit the configuration.

    • Click Save & Backup to save the connector and initiate the backup.

      After the backup starts, you can go to the Connectors page to view the progress of the backup. The status of the connector must be displayed as Running.

    • Click Save to save the connector. You can go to the Connectors page to view the status of the connector. The status must be displayed as Created.

      If the assigned apps are not active, the status is displayed as Pending app activation, and you cannot run backups using this connector. You are required to grant the admin consent for the assigned apps.

      See Approve M365 apps manually.

      See Approve M365 apps using the App Consent Grant utility.