Search <book_title>...

Cohesity Alta SaaS Protection Administrator's Guide

Last Published: 2025-04-07

Product(s): Veritas Alta SaaS Protection (1.0)

Introduction to Cohesity Alta SaaS Protection
1. About Cohesity Alta SaaS Protection
2. Features of Cohesity Alta SaaS Protection
3. Architecture of Cohesity Alta SaaS Protection
4. Operational workflow
5. Extra Data Backup (EDB)
API permissions
1. API permissions for Microsoft 365 workloads
2. API permissions for Gmail and Google Drive
3. System and API permissions for Salesforce
4. API permissions for Entra ID
5. App permissions of Web App
Administrator portal (Web UI)
1. About the Administration portal
2. Configure the Administration portal
3. View upgrade history
Manage users and roles
1. Role-based access control
2. Permissions tab
What is a connector?
1. What is a connector?
2. Supported SaaS workloads and backup capabilities
3. Workflow to protect data using Cohesity Alta SaaS Protection
4. Know your subscription details
5. About transient errors
6. Overview of adding connectors
7. Configure General settings
8. Configure Capture scope
9. Configure User filter
10. Configure Group filter
11. Configure Folder filter
12. Configure credentials
  1. Assign Microsoft 365 apps registration
  2. Microsoft 365 apps registration status
  3. Manually approve Microsoft 365 apps registration
  4. Approve Microsoft 365 apps using the App Consent Grant utility
  5. Microsoft 365 apps recovery
13. Configure Custom backup policy and guidelines
14. Configure Delete policy for SharePoint Online and guidelines
15. Configure Stubbing policy
16. Guidelines to configure Stubbing policy for SharePoint Online
17. Schedule a backup
18. Configure email addresses to get notifications
19. Review configuration and edit/save/initiate backup
20. Connectors page
21. Connector status
22. Edit connector configuration
23. Delete connectors
Pre-requisites for Microsoft 365 connectors
1. Pre-requisites for Microsoft 365 connectors
Protect Microsoft 365 Multi-Geo tenant
1. Considerations for adding SharePoint/Teams Sites/OneDrive connectors for Microsoft 365 Multi-Geo tenant
Protect Exchange Online data
1. Add Exchange Online connectors
2. Configure capture scope for Exchange connectors
Protect SharePoint sites and data
1. Add SharePoint connectors
2. Supported and unsupported SharePoint Settings and Types for backup and restore
3. Supported Sites and List templates for backup and restore
4. Supported SharePoint permission objects for backup and restore
5. Configuring capture scope for SharePoint connectors
6. End-user SharePoint data access in Cohesity Alta SaaS Protection
7. Run the Delete and Stubbing policies to the SharePoint Online environment
8. Limitations of SharePoint connector
Protect Teams sites
1. Add Teams site collections connectors
2. Configure capture scope for Team site collections connectors
3. Limitations of Teams site collections connector
Protect OneDrive data
1. Add OneDrive connectors
2. Configure capture scope for OneDrive connectors
Protect Teams chats
1. Add Teams chat connectors
2. Configure capture scope for Teams chat connectors
3. Limitations of Teams chat connector
Protect GoogleDrive data
1. Prerequisites to add Google Drive connectors
2. Add Google Drive connectors
3. Configure capture scope for Google Drive connectors
4. Limitations of Google Drive connector
Protect Gmail data
1. Prerequisites to add Gmail connectors
2. Add Gmail connectors
3. Configure capture scope for Gmail connectors
Protect Audit logs
1. Add Audit log connectors
2. Audit log connector limitations
Protect Salesforce data and metada
1. About Salesforce protection
2. Key considerations and prerequisites for adding Salesforce connectors
3. Add Salesforce connectors
4. Limitations of Salesforce connectors
5. Salesforce Objects not supported for backup
Protect Entra ID objects
1. Add Entra ID (Azure AD) connectors
2. Limitations for Entra ID connector
Protect Box data
1. Prerequisites for Box connectors configuration
2. Add Box connectors
3. Configure capture scope for Box connector
4. Limitations of Box connector
Protect Slack data
1. Add Slack connectors
Protect Email/Message data
1. Prerequisite for Email/message connector
2. Add Email/Messages file
Configure Retention policies
1. About WORM policies
2. Ingestion WORM policies page
3. Add/edit Ingestion WORM retention policies and guidelines
4. Add/edit At-Rest WORM retention policies
5. Add/edit Deletion policies
6. View deletion history
7. How to edit the policy evaluation interval?
8. How to add a Location filter?
9. How to add a filter?
Perform backups
1. Perform on-demand/ad-hoc backup
2. Backup dashboard
3. Video tutorial for connector troubleshooting
4. View backup events
  1. About Event suppression
  2. Create event suppression rules
5. Viewing backup tasks details
View and share backed-up data
1. Browse backed-up data
2. Share data
3. Remove data sharing
Analytics
1. About analytics
2. Gain insights into storage utilization
3. Gain insights into storage utilization for Entra ID and Salesforce connectors
4. Gain insights into blocked activities, most active users, and more
5. Gain insights into data volume (size and item count) on legal hold
6. Gain insights into data volume (size and item count) saved in different Enhanced cases
7. Gain insights into data volume (size and count) under different policies
8. Gain insights into data volume (size and item count) under different Tags
9. Gain insights into data volume (size and item count) under different Tags behaviors
10. Gain insights into storage savings after deduplication and compression
11. Gain insights into data ingestion trends
Perform restores using Administration portal
1. About restore
2. Prerequisites for restore
3. Restore Exchange Online mailboxes
4. Restore SharePoint/OneDrive/Teams Sites and data
  1. Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
  2. Limitations of SharePoint sites and data restore
5. Restore Teams chat messages and Teams channel conversations
  1. Limitations of Teams chat data restore
6. Restore O365 audit logs
7. Restore Box data
  1. Limitations of Box data restore
8. Restore Google Drive data
  1. About the overwrite restore behavior for Box/Google Drive data
9. Restore Gmail data
10. About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
11. About Entra ID (Azure AD) objects and records restore
12. Restore Slack data
13. Restore data to File server
14. Set default restore point
15. Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
16. Configure email addresses for notifications
17. Downloading an item
Restore dashboard
1. About Restore dashboard
2. Restore job statuses
3. How to cancel a restore job?
4. View the restore events
Install services and utilities
1. About services and utilities
2. Pre-requisites to download and install services and utilities
3. Downloading services and utilities
4. Where to install the services and utilities
5. Installing or upgrading services and utilities
6. Configuring service accounts for services and utilities
7. About the Apps Consent Grant Utility
Discovery
1. About eDiscovery/searches
2. Add search templates
3. Add Discovery cases
4. Perform ad hoc search and add data to Discovery cases
5. View data in Discovery cases
6. Edit Discovery cases
7. DeleteDiscovery cases
8. Assign Discovery cases to users
Configure Tagging polices
1. About the Tagging policy
2. Add Tags
3. Add/edit Tagging policies
4. Adding regular expressions
  1. RegEx and query examples for PII detection
Configure Tiering policy
1. About the Tiering policy
2. Add/edit Tiering policies
Auditing
1. Auditing
Manage Stors (Storages)
1. Viewing Stors (Storages)
2. Requesting a new Stor
3. General tab
4. Version control settings
5. Metadata tab
6. Statistical policies tab
7. Location-Mapping tab
8. Backup tab
9. Custodian Groups tab
10. Advanced tab
11. Analytics tab

About analytics

The analytics feature in Cohesity Alta SaaS Protection provides insights into the size and item count of backed-up data. You can view data for all or specific Stors, legal hold data, and data linked to policies and tags on different Administration portal pages. The size and item count vary across these pages, as described below:

Connectors page: Displays the size and item count reported by the source workload.
Analytics page: Displays the size and item count after storing to the Cohesity Alta SaaS Protection Stors.
System page: Displays the size and item count after deduplication and compression performed on the stored data.

Table:

Details	How to navigate?
Size and item count reported by the source workload (for example, Exchange, SharePoint, and so on).	These details are displayed for each connector separately. Navigate as follows: On the home page, click Backup. Click Connectors. Click within the row of the required connector. Click Tasks. The Task details page is opened. The size is displayed under the Total uploaded field.
Size and item count after storing to the Cohesity Alta SaaS Protection Stors.	These details are displayed on the Analytics page as well as on the System page. However, the size displayed on these pages differs from the size reported by the source workloads. This discrepancy occurs because Cohesity Alta SaaS Protection adds additional metadata and also modifies the data format when storing the backed-up data to its Stors. To get these details on the Analytics page, do the following: On the home page, click Analytics. On the left, click Storage. The size is displayed on the Total size section. OR On the home page, click Administration. On the left, click Storage. On the General tab, click the Stor for which you want to view the details. Click the Analytics tab. To get these details on the System page, do the following: On the home page, click System. On the left, click Storage. The size is displayed in the Original size section.
Displays the size and item count after deduplication and compression performed on the stored data.	To view these details after data compression and deduplication, do the following: On the home page, click System. On the left, click Storage. The compressed size and storage savings are displayed in the Storage savings section.

Details

How to navigate?

Size and item count reported by the source workload (for example, Exchange, SharePoint, and so on).

These details are displayed for each connector separately. Navigate as follows:

On the home page, click Backup.
Click Connectors.
Click within the row of the required connector.
Click Tasks.
The Task details page is opened. The size is displayed under the Total uploaded field.

Size and item count after storing to the Cohesity Alta SaaS Protection Stors.

These details are displayed on the Analytics page as well as on the System page.

However, the size displayed on these pages differs from the size reported by the source workloads. This discrepancy occurs because Cohesity Alta SaaS Protection adds additional metadata and also modifies the data format when storing the backed-up data to its Stors.

To get these details on the Analytics page, do the following:

On the home page, click Analytics.
On the left, click Storage.

The size is displayed on the Total size section.

On the home page, click Administration.
On the left, click Storage.
On the General tab, click the Stor for which you want to view the details.
Click the Analytics tab.

To get these details on the System page, do the following:

On the home page, click System.
On the left, click Storage.

The size is displayed in the Original size section.

Displays the size and item count after deduplication and compression performed on the stored data.

To view these details after data compression and deduplication, do the following:

On the home page, click System.
On the left, click Storage.

The compressed size and storage savings are displayed in the Storage savings section.

Format changes after backup

Before storing data in Cohesity Alta SaaS Protection Stors, the system applies format modifications as follows:

Table:

Workloads	Description
Exchange Online	Converts emails to MIME format. MIME formatting may increase size by ~30% for emails with attachments due to Base64 encoding. For mostly text emails, the size may decrease, but no email content is lost. Reports are based on the MIME-calculated size.
SharePoint Online	Generates an additional blob per item version to store metadata. Blob size: 1 - 4 KiB per item version. List items (for example, Employee Onboarding, Surveys) show only list item size as reported by SharePoint. The size on Analytics > Storage includes list item size + attachments.
Teams chat	Includes additional metadata for teams, channels, and chats in the Analytics size report.

Policy evaluations and statistics refresh behavior

The Analytics page provides insights into:

Size and item count of backed-up data
Blocked activities
User role assignments
Legal hold data
User trends (for example, number of users added over time)

These statistics are displayed in the corresponding tabs on the left. If your SKU includes Salesforce and Entra ID, you will see additional tabs for these workloads.

The statistics displayed on all tabs of the Analytics page are refreshed after every the incremental evaluation of their associated policies, which can include the system's default policies or custom policies created by you. However, if data is deleted by the Deletion policy, the size for that Stor will not be updated until the next full evaluation of the Deletion policy. You must always consider the refresh time displayed on the respective sections/charts. If multiple Stors/Scopes are selected, the most recent update time is displayed.

Table:

Policy evaluation type	Description
Full evaluation	Occurs in the following scenarios: The first week of each month. Tenant upgrade (if applicable). Policy configuration change that requires reevaluation. To known when the full evaluation is occurred, navigate to Administration > Storage > Stor > General > Policy evaluation section. View the timestamp of the Policy full evaluation last ran field.
Incremental evaluation	Occurs at a configurable interval. Set the Policy evaluation interval (in minutes) under Administration > Storage > Stor Name > General. This interval determines how frequently incremental policy execution occurs.

Policy evaluation type

Description

Full evaluation

Occurs in the following scenarios:

The first week of each month.
Tenant upgrade (if applicable).
Policy configuration change that requires reevaluation.

To known when the full evaluation is occurred, navigate to Administration > Storage > Stor > General > Policy evaluation section.

View the timestamp of the Policy full evaluation last ran field.

Incremental evaluation

Occurs at a configurable interval.

Set the Policy evaluation interval (in minutes) under Administration > Storage > Stor Name > General.

This interval determines how frequently incremental policy execution occurs.