1386 - Permissions required for Microsoft 365 backup

Below is a list of all permissions you will be required to allow in order to back up a specific Microsoft 365 service with the RedApp. To read more about Redstor's cloud security, see this article.

Note:

• To add a backup set and do a first recovery of any service (Exhange, OneDrive, SharePoint, Teams), you need to be both a RedApp company administrator, and a Microsoft 365 global administrator for your tenant organisation.
• To do subsequent recoveries, you need to be a RedApp company administrator and a Microsoft 365 product administrator, i.e. Exchange admin, SharePoint admin, or Teams admin. In the case of OneDrive, however, you need to be a Microsoft 365 global administrator, as there is no product administrator role.
• Read more about Microsoft's admin roles in this article on their knowledge base.

Exchange

• Read all hidden memberships
• Read mail in all mailboxes
• Read contacts in all mailboxes
• Read directory data Read calendars in all mailboxes
• Sign in and read user profile
• Use Exchange Web Services with full access to all mailboxes

OneDrive

• Read all hidden memberships
• Read all OneNote notebooks
• Read files in all site collections
• Read the organization's roster
• Read directory data
• Sign in and read user profile
• View notes for all users

SharePoint

• Read items in all site collections
• Read all OneNote notebooks
• Read files in all site collections
• Read the organization's roster
• Read directory data
• Sign in and read user profile
• View notes for all users
• Have full control of all site collections

Teams

• Read all hidden memberships
• Read all OneNote notebooks
• Read files in all site collections
• Read the organization's roster
• Read all chat messages
• Read all channel messages
• Read directory data
• Sign in and read user profile
• View notes for all users
• Have full control of all site collections