Microsoft 365: Connect Restore Tenants
Who can use this feature
Anyone with these permissions: Manage restore connections (Cloud workloads, SaaS applications)
This article explains how to connect a Microsoft 365 restore tenant so you can restore Microsoft 365 data into it.
Connect a restore tenant
In this procedure, you’ll grant Eon the Microsoft Graph permissions it needs to restore Microsoft 365 data into the tenant. For background on how Microsoft 365 tenants relate to Azure tenants in Eon, see Microsoft 365.
You’ll start this procedure in the SaaS applications page by clicking New Connection and selecting Connect Microsoft 365. The Configure Microsoft 365 restore panel opens.
Before you start
Before you connect a Microsoft 365 restore tenant, make sure:
-
Your Azure tenant is set up in Eon. For instructions, see Azure: Set Up Azure Tenants.
-
You can sign in to the tenant as a Global Administrator.
-
You have an Azure subscription for Microsoft 365 restore operations to run in, and you can sign in to it as an Owner. If the tenant has already been connected for restoring with Microsoft Entra ID, the restore subscription can be shared.
Deploy Eon's restore resources
-
Set the Azure restore subscription. This is the subscription where the restore server, which processes data and runs restore operations, is to be deployed during restores.
-
To run Microsoft 365 restore and Microsoft Entra ID restore on one subscription, select Use the subscription already connected for Entra ID restore. Eon fills in that subscription and its resource group, and adds the Microsoft 365 restore roles alongside the ones Microsoft Entra ID restore holds there. The option is shown only when the tenant has a Microsoft Entra ID restore subscription connected.
-
To keep the two products on separate subscriptions, select Dedicate a different subscription, then enter its Subscription ID.
-
-
Choose Terraform or Bash with the deployment toggle. A shared subscription is set up with Bash, because the Terraform module would overwrite the Microsoft Entra ID restore connection’s tags on a resource group it didn’t create.
-
Sign in to the subscription as an Owner and run the generated script:
Bash
Terraform
Run the generated
m365-restore-setup.shscript.
On a subscription of its own, this provisions a dedicated resource group and a management role that Eon uses to run restore operations in the subscription. On a shared subscription, it adds that role to the resource group that’s already there.
Grant admin consent
-
Choose Terraform or Bash with the deployment toggle. Eon shows the Microsoft Graph permissions it’s requesting.
-
Sign in to the tenant as a Global Administrator and run the generated script:
Bash
Terraform
Run the generated
grant-eon-m365-consent.shscript. -
Select I have granted admin consent in Microsoft.
Eon connects the Azure subscription and the Microsoft 365 restore tenant. You can now restore Microsoft 365 data.