Cohesity Alta SaaS Protection Administrator's Guide
- Introduction to Cohesity Alta SaaS Protection
- Cohesity Alta SaaS Protection Copilot (AI chatbot)
- Cohesity Alta SaaS Protection Administrator portal (Web UI)
- Supported SaaS workloads
- Workflow to protect data using Cohesity Alta SaaS Protection
- Manage users and roles
- API permissions
- What is a connector?
- What is a connector?
- About transient errors
- Overview of adding connectors
- Configure General settings
- Configure Capture scope
- Configure User filter
- Configure Group filter
- Configure Folder filter
- Configure credentials
- Configure Custom backup policy and guidelines
- Configure Delete policy for SharePoint Online and guidelines
- Configure Stubbing policy
- Guidelines to configure Stubbing policy for SharePoint Online
- Schedule a backup
- Configure email addresses to get notifications
- Review configuration and edit/save/initiate backup
- Connectors page
- Connector status
- Edit connector configuration
- Delete connectors
- Pre-requisites to setup protection for M365
- Protect Microsoft 365 Multi-Geo tenant
- Protect Exchange Online data
- Protect SharePoint sites and data
- Setting up SharePoint Online protection with Cohesity Alta SaaS Protection
- Backup and restore support for SharePoint Online
- End-user SharePoint data access in Cohesity Alta SaaS Protection
- Run the Delete and Stubbing policies to the SharePoint Online environment
- Backup limitations for SharePoint Online
- Protect Teams sites
- Protect OneDrive data
- Protect Teams chats
- Protect GoogleDrive data
- Protect Gmail data
- Protect Audit logs
- Protect Salesforce data and metada
- Protect Entra ID objects
- Protect Box data
- Protect Slack data
- Protect Email/Message data
- Configure Retention policies
- Perform backups
- View and share backed-up data
- Analytics
- About analytics
- Analytics page and refresh behavior
- Aggregation buckets
- Gain insights into storage utilization
- Gain insights into storage utilization for Entra ID and Salesforce connectors
- Gain insights into blocked activities, most active users, and more
- Gain insights into data volume (size and item count) on legal hold
- Gain insights into data volume (size and item count) saved in different Enhanced cases
- Gain insights into data volume (size and count) under different policies
- Gain insights into data volume (size and item count) under different Tags
- Gain insights into data volume (size and item count) under different Tags behaviors
- Gain insights into storage savings after deduplication and compression
- Gain insights into data ingestion trends
- Perform restores using Administration portal
- About restore
- Prerequisites for restore
- Restore Exchange Online mailboxes
- Restore SharePoint/OneDrive/Teams Sites and data
- Restore Teams chat messages and Teams channel conversations
- Restore O365 audit logs
- Restore Box data
- Restore Google Drive data
- Restore Gmail data
- About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
- Guidelines for Schema changes in Salesforce organization to prevent restore failures
- Restore Standard and Custom objects (Structured data restore)
- Custom Object restore - post processing steps
- Restore specific Records (Structured data) using Query filters
- Restore Salesforce CRM Content (Unstructured data restore)
- Restore Salesforce files/documents in Public/Shared libraries (Unstructured data restore)
- Limitations of Salesforce Data restore
- Salesforce Objects not supported for restore
- Key considerations for Salesforce Metadata restore
- Restore Salesforce Metadata
- Limitations of Salesforce Metadata backup and restore
- About Entra ID (Azure AD) objects and records restore
- Restore Slack data
- Restore data to File server
- Set default restore point
- Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
- Configure email addresses for notifications
- Downloading an item
- Restore dashboard
- Install services and utilities
- About services and utilities
- Pre-requisites to download and install services and utilities
- Downloading services and utilities
- Where to install the services and utilities
- Installing or upgrading services and utilities
- Configuring service accounts for services and utilities
- About the Apps Consent Grant Utility
- Discovery
- Configure Tagging polices
- Configure Tiering policy
- Auditing
- Manage Stors (Storages)
Setting up Entra ID protection with Cohesity Alta SaaS Protection
To protect your Entra ID environment using Cohesity Alta SaaS Protection, you need to add and set up a Cohesity Alta SaaS Protection Entra ID connector based on your backup requirements.
You must know the following before adding a connector:
:
Users: It includes backing up the user-related data such as profiles, settings, permissions, and other user-specific information.
Groups: It includes backing up the structure, memberships, and settings associated with the groups.
Application Registrations: It includes backing up the configurations, settings, and information associated with applications registered within the Entra ID environment.
Enterprises Applications: It includes backing up the configurations, settings, and data associated with enterprise-level applications registered and used within the Entra ID environment.
Backup and restore of passwords and multifactor authentication are not supported due to Graph API limitations.
Restore of multifactor authentication for the permanently deleted users is not supported.
Backup and restore of Application Registrations and Enterprise Applications' secrets are not supported.
Restore of Distribution Lists or Mail-enabled security groups is not supported.
Restore of eligible assignments and assignments with expired dates is not supported due to Graph API limits.
Backup and restore of photos or logos are not supported.
Only cloud-native attributes are restored for on-premises synchronized objects.
To perform restore of an Enterprise Application, its corresponding Application Registration should be restored first.
Restore of Enterprise Application for which the corresponding Application Registration is permanently deleted is not supported.
Each tab in the connector creation workflow includes a help icon (?) on the left. Click this icon to open the corresponding help topic for that tab, which guides you through the setup process step by step.
Procedure:
- Access the Administration portal and select the connector type.
Access the Administration portal.
Click Connectors on the Backup card.
Click New backup connector.
Click Microsoft Entra ID.
Do any of the following:
Play the video that guides you through the Entra ID connector creation process. After the video ends, close the page. This action directs you to the New Connector page where you can proceed to create a connector.
Click Skip if you prefer not to watch the video. This action directs you to the New Connector page where you can proceed to create a connector.
Select the Don't show this again check box to avoid seeing this page when you create subsequent Entra ID connectors.
- On the General tab, set up the basic configuration for the connector.
- On the Capture scope tab, click Next.
- On the Credentials tab, configure credentials to access the source workloads (the SharePoint data to be backed up) and click Next.
- On the Scheduling tab, schedule when the backup job should run.
See Schedule a backup.
- On the Email notifications tab, configure email addresses to receive notifications about backup activities.
- On the Review tab, save the settings and initiate the backup.