Veritas Alta™ SaaS Protection Administrator's Guide

Last Published:
Product(s): Veritas Alta SaaS Protection (1.0)
  1. Section I. Introduction to Veritas Alta™ SaaS Protection
    1. Introduction to Veritas Alta™ SaaS Protection
      1.  
        About Veritas Alta™ SaaS Protection
      2.  
        Features of Veritas Alta™ SaaS Protection
      3.  
        Tenant hosting methods
      4.  
        Architecture of Veritas Alta™ SaaS Protection
      5.  
        Services and utilities
  2. Section II. Administration
    1. Administration portal
      1.  
        About the Administration portal
      2.  
        System page
      3.  
        Analytics page
    2. General administrative tasks
      1.  
        Configuring system
      2.  
        Configuring the Administration portal
      3.  
        Viewing upgrade history
      4. Viewing licensing details
        1.  
          License page - SKU based
        2.  
          License page - Usage based
  3. Section III. Manage backups (connectors)
    1. Overview
      1. About backup jobs (connectors)
        1.  
          Supported SaaS applications for backup and restore
      2. Overview for adding backup jobs (connectors)
        1.  
          Configuring the general settings
        2. Configuring the capture scope
          1.  
            Filtering users based on Entra ID (Azure AD) extended attributes
          2.  
            Filtering users based on Entra ID (Azure AD) group membership
          3.  
            Filtering folders
        3. Configuring credentials
          1.  
            Configuring credentials using the Manual mode
          2. Configuring credentials using the M365 App Registrations mode
            1. Assigning apps to connector
              1.  
                Statuses of the Microsoft 365 registered apps
            2.  
              Granting admin consent manually
            3.  
              Granting multiple admin consents using the App Consent Grant utility
          3.  
            Recovery of Microsoft 365 apps
        4.  
          Configuring the Custom backup policy
        5. Configuring Delete and Stub policies
          1.  
            Points to consider when configuring policies for SharePoint environments
        6.  
          Scheduling the backup job
      3. Apps Consent Grant utility
        1.  
          Prerequisites to download and install the services and utilities
        2.  
          Post-installation activities for the Apps Consent Grant utility
        3.  
          Downloading services and utilities
        4.  
          Installing or upgrading services and utilities
    2. Backup Exchange Online mailboxes
      1.  
        Supported Exchange Online data for backup and restore
      2. Adding connectors for Exchange Online data
        1. Configuring the capture scope for Exchange connectors
          1.  
            Configuring the capture scope to back up mailboxes of all users
          2.  
            Configuring the capture scope to back up mailboxes of all users using the Rolling mailbox scope option
          3.  
            Configuring the capture scope to back up the mailboxes of users using the Alphabetical mailbox scope option
          4.  
            Configuring the capture scope to back up the mailboxes of specific users only
          5.  
            Configuring the capture scope to back up mailboxes from specific domains only
          6.  
            Configuring the capture scope to back up Group/Teams mailboxes
          7.  
            Configuring the capture scope to back up Public folders
      3.  
        API permissions for the Exchange Online
    3. Backup SharePoint Online
      1. Supported SharePoint Online sites and data for backup and restore
        1.  
          Supported settings and column types at site collections, site, and list level
        2.  
          Supported sites and list templates
        3.  
          Supported permission objects
      2. Adding backup jobs (connectors) for SharePoint Online sites and data
        1. Configuring the capture scopes for SharePoint connectors
          1.  
            Configuring the capture scope to back up all SharePoint site collections
          2.  
            Configuring the capture scope to back up specific SharePoint sites only
          3.  
            Configuring the capture scope to back up only specific sites using the Rolling site collection scope option
      3.  
        API permissions for SharePoint, OneDrive for Business, and Teams Sites Collections
      4.  
        Limitations for SharePoint Online backup
    4. Backup Teams Sites collections
      1.  
        Supported Teams site collection data for backup and restore
      2. Adding backup jobs (connectors) for Teams site collections and data
        1. Configuring the capture scopes for Teams site connectors
          1.  
            Configuring the capture scope to back up all Team site collections
          2.  
            Configuring the capture scope to back up specific Team sites only
          3.  
            Configuring the capture scope to back up only specific Team sites using the Rolling site collection scope option
      3.  
        Limitations for Teams site collections backup
    5. Backup OneDrive for Business
      1.  
        Supported OneDrive for Business data for backup
      2. Adding a backup jobs (connector) for OneDrive for Business data
        1. Configuring the capture scope for OneDrive for Business connectors
          1.  
            Configuring the capture scope to back up all OneDrive site collections
          2.  
            Configuring the capture scope to back up specific OneDrive sites only
          3.  
            Configuring the capture scope to back up only specific OneDrive sites using the Rolling site collection scope option
    6. Backup Teams chats
      1.  
        Supported Teams chat data for backup
      2. Adding a backup jobs (connectors) for Teams chats
        1.  
          Configuring the capture scope for Teams chat connectors
      3.  
        API permissions for Teams chat
      4.  
        Limitations for Teams chat backup
    7. Backup Audit logs
      1.  
        Adding backup jobs (connectors) for O365 Audit logs
    8. Backup Google Drive data
      1.  
        Prerequisites to add Google Drive connector
      2.  
        API permissions for Gmail and Google Drive
      3.  
        Supported Google Drive data for backup and restore
      4. Adding backup jobs (connectors) for Google Drive data
        1.  
          Configuring the capture scope for Google Drive connectors
      5.  
        Limitation for Google Drive data backup
    9. Backup Gmail data
      1.  
        Supported Gmail data for backup and restore
      2. Adding backup jobs (connectors) for Gmail data
        1.  
          Configuring backup scopes for Gmail data
    10. Backup Salesforce data
      1.  
        About the Salesforce connector
      2.  
        Prerequisites to add Salesforce connectors
      3.  
        Adding connectors for Salesforce Data and Metadata
      4.  
        Uploading a certificate to the Salesforce organization
      5.  
        Limitations of Salesforce data backup
      6.  
        Salesforce Objects not supported for backup
    11. Backup Entra ID (Azure AD) objects
      1.  
        Supported Entra ID objects for backup and restore
      2.  
        Adding backup jobs (connectors) for Entra ID (Azure AD)
      3.  
        Limitations for backup and restore
    12. Backup Box data
      1.  
        Prerequisites to add Box connectors
      2.  
        Supported Box data for backup and restore
      3. Adding backup jobs (connectors) for Box data
        1.  
          Configuring backup scopes for Box data
      4.  
        Limitations for Box data backup
    13. Backup Slack data
      1.  
        Adding backup jobs (connectors) for Slack data
      2.  
        Limitations
    14. Backup EML data
      1. Backup Email/Messages
        1.  
          Prerequisite
        2.  
          Adding backup jobs (connectors) for EML/Messages data
    15. Managing backup jobs (connectors)
      1.  
        Performing on-demand backup
      2.  
        Running Delete and Stub policies for SharePoint Online data
      3.  
        Scheduling a backup job
      4.  
        Editing connectors
      5.  
        Deleting connectors
    16. Backup jobs (connectors) statuses
      1.  
        Viewing backup jobs (connectors) statuses
      2.  
        Backup statuses
    17. Browsing the backed-up data
      1.  
        Browsing backed-up data
    18. Events
      1.  
        Viewing backup events
      2.  
        About Event suppression
      3.  
        Creating event suppression rules
  4. Section IV. Manage restores
    1. About restore
      1.  
        About restore
    2. Prerequisites for data restore
      1.  
        Prerequisites for data restore
    3. Restore dashboard
      1.  
        About the Restore dashboard
      2.  
        Restore job statuses
      3.  
        How to cancel the restore job?
      4.  
        View the restore events
    4. Restore Exchange Online mailboxes
      1. Restore Exchange Online mailboxes
        1.  
          Supported Item Class for restore
    5. Restore SharePoint Online data
      1.  
        Restore SharePoint/OneDrive/Teams site data and sites
      2.  
        Recovery process and restore location options
      3.  
        Recovery of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      4.  
        Stub restore behavior
      5.  
        Permissions restore
      6.  
        Restrictions for restore of SharePoint Online data and sites
      7.  
        Limitations for restore of SharePoint Online data and sites
    6. Restore Teams chats and Teams Channel conversations
      1.  
        Restore Teams chats and Teams channel conversations
      2.  
        Limitations of Teams chat data restore
    7. Restore Audit logs
      1.  
        Restore O365 audit logs
    8. Restore Box data
      1.  
        Restore Box data
      2.  
        Limitations for Box data restore
    9. Restore Google Drive data
      1.  
        Restore Google Drive data
      2.  
        Limitation for Google Drive data restore
    10. Restore Gmail data
      1.  
        Restore Gmail data
    11. Restore Salesforce data and Metadata
      1.  
        About Salesforce Data and Metadata restore
      2.  
        Restore Objects to the same or another organization
      3.  
        Restore specific Records to the same or another organization
      4.  
        Restore specific Records to the same or another organization (using query filters)
      5. Restore Salesforce Metadata to the same or another organization
        1.  
          Limitations of Salesforce Metadata backup and restore
      6.  
        Sequence for manual restoration of deleted custom object attributes
      7.  
        Limitations of Salesforce data restore
      8.  
        Salesforce Objects not supported for restore
    12. Restore Entra ID objects
      1. About restoring Entra ID (Azure AD) objects and records
        1.  
          Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restoring an Entra ID object
      4.  
        Restoring specific records within Entra ID objects
    13. Restore Slack data
      1.  
        Restore Slack data
    14. Restore data to File server
      1.  
        Restore data to File server
    15. Restore options
      1.  
        Set the default restore point
      2.  
        Selecting items to restore (all or point-in-time)
      3.  
        Overwrite restore behavior for Exchange Online data
      4.  
        Overwrite restore behavior for SharePoint Online
      5.  
        Overwrite restore behavior for Box data
      6.  
        Configuring email addresses for notifications
  5. Section V. Manage data sharing
    1. Share data
      1.  
        Sharing data with other users
      2.  
        Removing admin shares
  6. Section VI. Manage data downloads
    1. Download data
      1.  
        Downloading an item
  7. Section VII. Manage Stors (Storages)
    1. Manage Stors (Storages)
      1.  
        Viewing Stors (Storages)
      2.  
        Requesting a new Stor
      3.  
        General tab
      4.  
        Metadata tab
      5.  
        Statistical policies tab
      6.  
        Location-Mapping tab
      7.  
        Backup tab
      8.  
        Custodian Groups tab
      9.  
        Advanced tab
      10.  
        Analytics tab
  8. Section VIII. Policies to manage the backed-up data
    1. About policies in Veritas Alta™ SaaS Protection
      1.  
        About policies in Veritas Alta™ SaaS Protection
      2. About WORM policies
        1.  
          Points to consider before adding retention policies
      3.  
        About the Deletion policy
      4. About the Tiering policy
        1.  
          Storage tiering and full-text search
        2.  
          User experience on storage tiering
        3.  
          Priority for storage tiering
      5.  
        About the Tagging policy
      6.  
        How to edit the policy evaluation interval?
    2. Configuring policies for data retention (WORM policies)
      1.  
        Adding or updating ingestion WORM retention policies
      2.  
        Adding or updating At-Rest WORM retention policies
    3. Configuring policies for data deletion (Deletion policy)
      1.  
        Adding or updating Deletion policies
      2.  
        Viewing the deletion history
    4. Configuring policies for data tiering (Tiering policy)
      1.  
        Adding or updating Tier policies
    5. Configuring Tagging polices
      1.  
        Adding Tags
      2.  
        Adding or updating Tagging policies
      3. Adding regular expressions
        1.  
          RegEx and query examples for PII detection
    6. Managing policies
      1.  
        Deleting policies
      2.  
        Analyzing the effect of policies
      3.  
        Analytics page for policies
  9. Section IX. Manage users and roles
    1. Managing users and roles
      1.  
        About user and roles
      2.  
        Assigning the Default role to users
      3.  
        Adding new roles
      4.  
        Searching for a specific user or group
      5.  
        Assigning permissions to users
      6.  
        The allowed list of the unrecognized retrieval users
  10. Section X. Manage Discovery cases and searches
    1. Managing Discovery cases
      1.  
        About eDiscovery
      2.  
        Adding Discovery cases
      3.  
        Viewing data in Discovery cases
      4.  
        Editing Discovery cases
      5.  
        Deleting Discovery cases
      6.  
        Assigning Discovery cases to users
      7.  
        Performing an ad hoc search and adding data to Discovery cases
      8.  
        Adding Discovery case template
  11. Section XI. Manage Scopes
    1. Managing Scopes
      1.  
        About Scopes
      2.  
        Enabling Scopes
      3.  
        Configuring Scopes
      4.  
        Using Scopes
  12. Section XII. Manage auditing
    1. Managing auditing
      1.  
        About auditing

Restoring specific records within Entra ID objects

You can restore specific records within the object such as users, groups, application registrations, or enterprise applications using any of the following procedures.

To restore specific records within Entra ID objects

  1. Access the Administration portal.
  2. Click Content and do the following:
    • Select the required Stor from the upper left drop-down list.

    • Watch the video or close the pop-up.

    • Click the drop-down list next to the selected Stor and select the required restore point.

      Note:

      Recovery points represent the point in time when selected objects or records are backed up. Selecting a specific recovery point lets you restore the object or record as it was at the time of backup.

      Note:

      The latest restore point is selected by default. You can also set another point as the default.

      To set the other restore point as the default one, click the restore points drop-down list > Specific restore point link > on the Set to specific restore point page, select the restore point to be set as default, and then click Set.

    • In the left pane, select the required object. For example, User.

    • Click Restore.

      The Restore page is displayed.

  3. On the Restore page, do the following:
    • If required, change the destination from the Restore to Microsoft Entra ID drop-down list. Ensure that you contact Veritas Support for this change.

    • If you are restoring a user object, assign a password in the Assign default password field.

      Note:

      To ensure that your password meets the required guidelines, click the Password guidelines link to know more.

    • Expand the Advanced options section and do the following:

      • Select Overwrite existing directory check box to overwrite the items at the destination. If this check box is not selected, existing items at the destination are skipped during restore.

      • Select the Restore from recycle bin if it exists there check box to restore the objects available in the Recycle bin.

      • Select the Force restore of on-premises synchronized directory objects/records check box if you cannot restore the object to the on-premises Active Directory. If this check box is selected, the on-premises synchronized objects are restored to the targeted Entra ID. The objects are restored with new IDs and are no longer linked to the on-premises Active Directory.

    • Click Next.

      Veritas Alta™ SaaS Protection verifies the permissions that you have within Entra ID. You cannot proceed if you do not have the required permissions.

      The items that are to be restored are displayed.

    • Click Next.

      The items are being analyzed. Depending on the number of items, this operation may take some time. You can also skip analyzing the records and proceed by clicking Next.

    • On the Email notifications page, do the following:

      • Enter the email addresses of the users who must be notified after the restore operation is completed.

      • Click Next.

    • On the Review page, do the following:

      • Verify all the details.

      • Click Restore.

        After the restore is initiated, you can go to the Restore dashboard to view the restore progress.

    Note:

    The time required to restore records to the destination can vary.

  4. Navigate to the destination to confirm that the object is restored successfully.

To restore specific records within Entra ID objects using filters

Filters let you select specific data for restore based on certain criteria. It is useful when you know exactly what needs to be restored, for example, if you want to restore a user named John in the company Infinity.

  1. Access the Administration portal.
  2. Click Content.
  3. On the Content page, do the following:
    • Select the required Stor from the upper left drop-down list.

    • Watch the video or close the pop-up.

      On the Content page, do the following:

      • Select the required Stor from the upper left drop-down list.

      • Watch the video or close the pop-up.

      • Click the drop-down list next to the selected Stor and select the required restore point.

        Note:

        Recovery points represent the point in time when selected objects or records are backed up. Selecting a specific recovery point lets you restore the object or record as it was at the time of backup.

        Note:

        The latest restore point is selected by default. You can also set another point as the default.

        To set the other restore point as the default one, click the restore points drop-down list > Specific restore point link > on the Set to specific restore point page, select the restore point to be set as default, and then click Set.

      • Click Restore.

        The Restore page is displayed.

  4. On the Restore page tab, do the following:
    • If required, change the destination from the Restore to Microsoft Entra ID drop-down list. Ensure that you contact Veritas Support for this change.

    • Click Records.

    • From the Resource drop-down list, select the object of which records you want to restore.

    • To configure a filter to select the specific records that you want to restore, do the following:

      • Click Add a filter.

        The filter parameters are displayed based on the selected object.

        For example, the user object presents filter parameters such as displayename, employeeId, and so on.

      • Select the required parameter from the list.

        For example, displayname. The equal operation is selected for this parameter by default. Enter the value, such as the display name of the user.

      • Add multiple filters to meet your specific data requirements.

        With multiple filters, you can choose to apply either any or all of the filters using the Filters drop-down list.

    • If you are restoring a user object, assign a password in the Assign default password field.

      Note:

      To ensure that your password meets the required guidelines, click the Password guidelines link to know more.

    • Expand the Advanced options section and do the following:

      • Select Overwrite existing directory check box to overwrite the items at the destination. If this check box is not selected, existing items at the destination are skipped during restore.

      • Select the Restore from recycle bin if it exists there check box to restore the objects available in the Recycle bin.

      • Select the Force restore of on-premises synchronized directory objects/records check box if you cannot restore the object to the on-premises Active Directory. If this check box is selected, the on-premises synchronized objects are restored to the targeted Entra ID. The objects are restored with new IDs and are no longer linked to the on-premises Active Directory.

    • Click Next.

      Veritas Alta™ SaaS Protection verifies the permissions that you have within Entra ID. You cannot proceed if you do not have the required permissions.

      The items that are to be restored are displayed.

    • Click Next.

      The items are being analyzed. Depending on the number of items, this operation may take some time. You can also skip analyzing the records and proceed by clicking Next.

    • On the Email notifications page, do the following:

      • Enter the email addresses of the users who must be notified after the restore operation is completed.

      • Click Next.

    • On the Review page, do the following:

      • Verify all the details.

      • Click Restore.

        After the restore is initiated, you can go to the Restore dashboard to view the restore progress.

    Note:

    The time required to restore records to the destination can vary.

  5. Navigate to the destination to confirm that the object is restored successfully.