Veritas Alta™ SaaS Protection Administrator's Guide

Last Published:
Product(s): Veritas Alta SaaS Protection (1.0)
  1. Introduction to Veritas Alta™ SaaS Protection
    1.  
      About Veritas Alta SaaS Protection
    2.  
      Features of Veritas Alta SaaS Protection
    3.  
      Architecture of Veritas Alta SaaS Protection
    4.  
      Supported SaaS workloads
    5.  
      Operational workflow
    6. Administration portal
      1.  
        Analytics
      2.  
        About the System page
  2. EDB and EDB compliance
    1.  
      Extra Data Backup (EDB)
  3. Active Directory synchronization
    1.  
      About Active Directory (Entra ID) synchronization
    2.  
      Prerequisite
    3.  
      Features required Active Directory (Entra ID) synchronization
    4.  
      Limitations if Active Directory (Entra ID) synchronization is not enabled
    5.  
      How to enable Active Directory (Entra ID) synchronization
  4. Manage users and roles
    1.  
      Role-based access control
    2.  
      User permissions
    3. Permissions tab
      1.  
        Users and groups page
      2.  
        Roles page
      3.  
        Unrecognized users page
      4.  
        Settings page
  5. API permissions
    1.  
      API permissions for Exchange Online
    2.  
      API permissions for SharePoint, OneDrive for Business, and Teams Sites Collections
    3.  
      API permissions for Teams chat
    4.  
      API permissions for Gmail and Google Drive
  6. Add connectors
    1.  
      Features of connectors
    2. Overview of adding connectors
      1.  
        Configure General settings
    3.  
      Connectors page
    4.  
      Connector status
    5. Add Exchange Online connectors
      1. Configure the capture scope for Exchange connectors
        1.  
          Configure the capture scope to back up mailboxes of all users
        2.  
          Configure the capture scope to back up mailboxes of all users using the Rolling mailbox scope option
        3.  
          Configure the capture scope to back up the mailboxes of users using the Alphabetical mailbox scope option
        4.  
          Configure the capture scope to back up the mailboxes of specific users only
        5.  
          Configure the capture scope to back up mailboxes from specific domains only
        6.  
          Configure the capture scope to back up Group/Teams mailboxes
        7.  
          Configure the capture scope to back up Public folders
    6. Add SharePoint Online connectors
      1.  
        Supported and unsupported SharePoint Settings and Types for backup and restore
      2.  
        Supported Sites and List templates for backup and restore
      3.  
        Supported SharePoint permission objects for backup and restore
      4. Configuring the capture scopes for SharePoint connectors
        1.  
          Configuring the capture scope to back up all SharePoint site collections
        2.  
          Configuring the capture scope to back up specific SharePoint sites only
        3.  
          Configuring the capture scope to back up only specific sites using the Rolling site collection scope option
      5.  
        Delete policy for SharePoint environments
      6.  
        Stubbing policy for SharePoint Online
      7.  
        Run Delete and Stubbing policies to the SharePoint Online environment
      8.  
        SharePoint Online connector limitations
    7. Add Teams site collections connectors
      1. Configure the capture scope for Teams site connectors
        1.  
          Configure the capture scope to back up all Team site collections
        2.  
          Configure the capture scope to back up specific Team sites only
        3.  
          Configure the capture scope to back up only specific Team sites using the Rolling site collection scope option
      2.  
        Teams site collections connector limitations
    8. Add OneDrive connectors
      1. Configure the capture scope for OneDrive for Business connectors
        1.  
          Configure the capture scope to back up all OneDrive site collections
        2.  
          Configure the capture scope to back up specific OneDrive sites only
        3.  
          Configure the capture scope to back up only specific OneDrive sites using the Rolling site collection scope option
    9. Add Teams chat connectors
      1.  
        Configure the capture scope for Teams chat connectors
      2.  
        Teams chat connector limitations
    10.  
      Configure User filter
    11.  
      Configure Group filter
    12.  
      Configure Filter folder
    13.  
      Configure credentials using Manual mode
    14.  
      Assign M365 apps to M365 connectors
    15.  
      M365 apps status
    16.  
      M365 apps recovery
    17.  
      Approve M365 apps manually
    18.  
      Approve M365 apps using App Consent Grant utility
    19.  
      Configure Custom backup policy
    20. Add Audit Log connectors
      1.  
        Audit log connector limitation
    21.  
      Prerequisites to add Google Drive connectors
    22. Add Google Drive connectors
      1.  
        Configure the capture scope for Google Drive connectors
      2.  
        Google Drive connector limitations
    23. Add Gmail connectors
      1.  
        Configure Capture scopes for Gmail data
    24. About the Salesforce connector
      1.  
        Prerequisites to add Salesforce connectors
      2.  
        Add Salesforce connectors
      3.  
        Upload a certificate to the Salesforce organization
      4.  
        Limitations of Salesforce connector
      5.  
        Salesforce Objects not supported for backup
    25. Add Entra ID (Azure AD) connectors
      1.  
        Limitations for Entra ID connector
    26. Add Box connectors
      1.  
        Configure capture scope for Box data
      2.  
        Box connector limitations
    27.  
      Add Slack connectors
    28. Add Email/Messages
      1.  
        Prerequisite
      2.  
        Adding EML/Messages connectors
    29.  
      Edit connectors
    30.  
      Delete connectors
  7. Apps Consent Grant Utility
    1.  
      About the Apps Consent Grant Utility
    2.  
      Pre-requisites to download and install services and utilities
    3.  
      Downloading the Apps Consent Grant Utility
    4.  
      Installing or upgrading the Apps Consent Grant Utility
    5.  
      Post-installation activities for the Apps Consent Grant Utility
  8. Add Retention policies
    1.  
      About WORM policies
    2.  
      Ingestion WORM policies page
    3.  
      Points to consider before adding retention policies
    4.  
      Add/edit Ingestion WORM retention policies
    5.  
      Add/edit At-Rest WORM retention policies
    6.  
      About Deletion policy
    7.  
      Add/edit Deletion policies
    8.  
      View deletion history
    9.  
      How to edit the policy evaluation interval?
    10.  
      How to add a Location filter?
    11.  
      How to add a filter?
  9. Perform backups
    1.  
      Perform on-demand/ad-hoc backup
    2. View backup events
      1.  
        About Event suppression
      2.  
        Create event suppression rules
    3.  
      Viewing backup tasks details
  10. Manage backed-up data
    1.  
      Browse backed-up data
    2. Share data
      1.  
        Remove data sharing
  11. Perform restores using Administration portal
    1.  
      About restore
    2.  
      Prerequisites for restore
    3.  
      Restore Exchange Online mailboxes
    4. Restore SharePoint/OneDrive/Teams Sites and data
      1.  
        Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      2.  
        Limitations of SharePoint Online data and sites restore
    5. Restore Teams chat messages and Teams channel conversations
      1.  
        Limitations of Teams chat data restore
    6.  
      Restore O365 audit logs
    7. Restore Box data
      1.  
        Limitations of Box data restore
    8. Restore Google Drive data
      1.  
        About the overwrite restore behavior for Box/Google Drive data
    9.  
      Restore Gmail data
    10. About the Salesforce Data, Metadata, and CRM Content restore
      1.  
        Restore Standard and Custom objects (Structured data)
      2.  
        Custom Object restore - post processing steps
      3.  
        Restore specific Records (Structured data) using Query filters
      4.  
        Restore Salesforce CRM Content (Unstructured data)
      5.  
        Limitations of Salesforce Data restore
      6.  
        Considerations for Salesforce Metadata restore
      7.  
        Restore Salesforce Metadata
      8. Limitations of Salesforce Metadata backup and restore
        1.  
          Salesforce Objects not supported for restore
    11. About Entra ID (Azure AD) objects and records restore
      1.  
        Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restore an Entra ID object
      4.  
        Restore specific records within Entra ID objects
    12.  
      Restore Slack data
    13.  
      Restore data to File server
    14.  
      Set the default restore point
    15.  
      Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
    16.  
      Configure email addresses for notifications
    17.  
      Downloading an item
  12. Perform restores using Export Utility
    1.  
      Standard guidelines for Export Utility
    2. Restoring the SharePoint site data and Discovery case
      1.  
        Configure a SharePoint connection using the Basic authentication
      2.  
        Configure a SharePoint connection using the Modern/OAuth authentication
      3.  
        Configure a SharePoint connection using the App Registration authentication
  13. Restore dashboard
    1.  
      About Restore dashboard
    2.  
      Restore job statuses
    3.  
      How to cancel a restore job?
    4.  
      View the restore events
  14. Install services and utilities
    1.  
      About services and utilities
    2.  
      Pre-requisites to download and install services and utilities
    3.  
      Downloading services and utilities
    4.  
      Where to install the services and utilities
    5.  
      Installing or upgrading services and utilities
    6.  
      Configuring service accounts for services and utilities
    7.  
      Configuring the Export service
    8.  
      Configuring the Export utility
    9.  
      Configuring the File copy utility
  15. Discovery
    1.  
      About eDiscovery/searches
    2.  
      Add search templates
    3.  
      Add Discovery cases
    4.  
      Perform ad hoc search and add data to Discovery cases
    5.  
      View data in Discovery cases
    6.  
      Edit Discovery cases
    7.  
      DeleteDiscovery cases
    8.  
      Assign Discovery cases to users
  16. Add Tagging polices
    1.  
      About the Tagging policy
    2.  
      Add Tags
    3.  
      Add/edit Tagging policies
    4. Adding regular expressions
      1.  
        RegEx and query examples for PII detection
  17. Add Tiering policy
    1. About the Tiering policy
      1.  
        Storage tiering and full-text search
      2.  
        User experience on storage tiering
      3.  
        Priority for storage Tiering
    2.  
      Add/edit Tiering policies
  18. General administrative tasks
    1.  
      View upgrade history
    2.  
      Configure the Administration portal
    3.  
      Auditing
  19. Manage Stors (Storages)
    1.  
      Viewing Stors (Storages)
    2.  
      Requesting a new Stor
    3.  
      General tab
    4.  
      Metadata tab
    5.  
      Statistical policies tab
    6.  
      Location-Mapping tab
    7.  
      Backup tab
    8.  
      Custodian Groups tab
    9.  
      Advanced tab
    10.  
      Analytics tab
  20. Managing Scopes
    1.  
      About Scopes
    2.  
      Enabling Scopes
    3.  
      Configuring Scopes
    4.  
      Using Scopes
  21. Known Issues
    1.  
      Know Issues

Restore specific records within Entra ID objects

You can restore specific records within the object such as users, groups, application registrations, or enterprise applications using any of the following procedures.

To restore specific records within Entra ID objects

  1. Access the Administration portal.
  2. Click Content and do the following:
    • Select the required Stor from the upper left drop-down list.

    • Watch the video or close the pop-up.

    • Click the drop-down list next to the selected Stor and select the required restore point.

      Note:

      Recovery points represent the point in time when selected objects or records are backed up. Selecting a specific recovery point lets you restore the object or record as it was at the time of backup.

      Note:

      The latest restore point is selected by default. You can also set another point as the default.

      To set the other restore point as the default one, click the restore points drop-down list > Specific restore point link > on the Set to specific restore point page, select the restore point to be set as default, and then click Set.

    • In the left pane, select the required object. For example, User.

    • Click Restore.

      The Restore page is displayed.

  3. On the Restore page, do the following:
    • If required, change the destination from the Restore to Microsoft Entra ID drop-down list. Ensure that you contact Veritas Support for this change.

    • If you are restoring a user object, assign a password in the Assign default password field.

      Note:

      To ensure that your password meets the required guidelines, click the Password guidelines link to know more.

    • Expand the Advanced options section and do the following:

      • Select Overwrite existing directory check box to overwrite the items at the destination. If this check box is not selected, existing items at the destination are skipped during restore.

      • Select the Restore from recycle bin if it exists there check box to restore the objects available in the Recycle bin.

      • Select the Force restore of on-premises synchronized directory objects/records check box if you cannot restore the object to the on-premises Active Directory. If this check box is selected, the on-premises synchronized objects are restored to the targeted Entra ID. The objects are restored with new IDs and are no longer linked to the on-premises Active Directory.

    • Click Next.

      Veritas Alta™ SaaS Protection verifies the permissions that you have within Entra ID. You cannot proceed if you do not have the required permissions.

      The items that are to be restored are displayed.

    • Click Next.

      The items are being analyzed. Depending on the number of items, this operation may take some time. You can also skip analyzing the records and proceed by clicking Next.

    • On the Email notifications page, do the following:

      • Enter the email addresses of the users who must be notified after the restore operation is completed.

      • Click Next.

    • On the Review page, do the following:

      • Verify all the details.

      • Click Restore.

        After the restore is initiated, you can go to the Restore dashboard to view the restore progress.

    Note:

    The time required to restore records to the destination can vary.

  4. Navigate to the destination to confirm that the object is restored successfully.

To restore specific records within Entra ID objects using filters

Filters let you select specific data for restore based on certain criteria. It is useful when you know exactly what needs to be restored, for example, if you want to restore a user named John in the company Infinity.

  1. Access the Administration portal.
  2. Click Content.
  3. On the Content page, do the following:
    • Select the required Stor from the upper left drop-down list.

    • Watch the video or close the pop-up.

      On the Content page, do the following:

      • Select the required Stor from the upper left drop-down list.

      • Watch the video or close the pop-up.

      • Click the drop-down list next to the selected Stor and select the required restore point.

        Note:

        Recovery points represent the point in time when selected objects or records are backed up. Selecting a specific recovery point lets you restore the object or record as it was at the time of backup.

        Note:

        The latest restore point is selected by default. You can also set another point as the default.

        To set the other restore point as the default one, click the restore points drop-down list > Specific restore point link > on the Set to specific restore point page, select the restore point to be set as default, and then click Set.

      • Click Restore.

        The Restore page is displayed.

  4. On the Restore page tab, do the following:
    • If required, change the destination from the Restore to Microsoft Entra ID drop-down list. Ensure that you contact Veritas Support for this change.

    • Click Records.

    • From the Resource drop-down list, select the object of which records you want to restore.

    • To configure a filter to select the specific records that you want to restore, do the following:

      • Click Add a filter.

        The filter parameters are displayed based on the selected object.

        For example, the user object presents filter parameters such as displayename, employeeId, and so on.

      • Select the required parameter from the list.

        For example, displayname. The equal operation is selected for this parameter by default. Enter the value, such as the display name of the user.

      • Add multiple filters to meet your specific data requirements.

        With multiple filters, you can choose to apply either any or all of the filters using the Filters drop-down list.

    • If you are restoring a user object, assign a password in the Assign default password field.

      Note:

      To ensure that your password meets the required guidelines, click the Password guidelines link to know more.

    • Expand the Advanced options section and do the following:

      • Select Overwrite existing directory check box to overwrite the items at the destination. If this check box is not selected, existing items at the destination are skipped during restore.

      • Select the Restore from recycle bin if it exists there check box to restore the objects available in the Recycle bin.

      • Select the Force restore of on-premises synchronized directory objects/records check box if you cannot restore the object to the on-premises Active Directory. If this check box is selected, the on-premises synchronized objects are restored to the targeted Entra ID. The objects are restored with new IDs and are no longer linked to the on-premises Active Directory.

    • Click Next.

      Veritas Alta™ SaaS Protection verifies the permissions that you have within Entra ID. You cannot proceed if you do not have the required permissions.

      The items that are to be restored are displayed.

    • Click Next.

      The items are being analyzed. Depending on the number of items, this operation may take some time. You can also skip analyzing the records and proceed by clicking Next.

    • On the Email notifications page, do the following:

      • Enter the email addresses of the users who must be notified after the restore operation is completed.

      • Click Next.

    • On the Review page, do the following:

      • Verify all the details.

      • Click Restore.

        After the restore is initiated, you can go to the Restore dashboard to view the restore progress.

    Note:

    The time required to restore records to the destination can vary.

  5. Navigate to the destination to confirm that the object is restored successfully.