> This page is for Data Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.eon.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server.

# Microsoft 365: Connect Restore Tenants

This article explains how to connect a Microsoft 365 restore tenant so you can restore Microsoft 365 data into it.

## Connect a restore tenant

In this procedure, you'll grant Eon the Microsoft Graph permissions it needs to restore Microsoft 365 data into the tenant.
For background on how Microsoft 365 tenants relate to Azure tenants in Eon, see [Microsoft 365].

You'll start this procedure in the

SaaS applications

page by clicking **New Connection** and selecting **Connect Microsoft 365**.
The **Configure Microsoft 365 restore** panel opens.

#### Before you start

Before you connect a Microsoft 365 restore tenant, make sure:

* Your Azure tenant is set up in Eon.
  For instructions, see [Azure: Set Up Azure Tenants].

* You can sign in to the tenant as a Global Administrator.

* You have an Azure subscription for Microsoft 365 restore operations to run in, and you can sign in to it as an Owner.
  If the tenant has already been connected for restoring with Microsoft Entra ID, the restore subscription can be shared.

#### Select your tenant and Azure subscription

Select your Microsoft 365 tenant from the tenant list.

#### Deploy Eon's restore resources

1. Set the Azure restore subscription.
   This is the subscription where the restore server, which processes data and runs restore operations, is to be deployed during restores.

   * To run Microsoft 365 restore and Microsoft Entra ID restore on one subscription, select **Use the subscription already connected for Entra ID restore**.
     Eon fills in that subscription and its resource group, and adds the Microsoft 365 restore roles alongside the ones Microsoft Entra ID restore holds there.
     The option is shown only when the tenant has a Microsoft Entra ID restore subscription connected.

   * To keep the two products on separate subscriptions, select **Dedicate a different subscription**, then enter its **Subscription ID**.

2. Choose **Terraform** or **Bash** with the deployment toggle.
   A shared subscription is set up with Bash, because the Terraform module would overwrite the Microsoft Entra ID restore connection's tags on a resource group it didn't create.

3. Sign in to the subscription as an Owner and run the generated script:

   #### Bash

   Run the generated `m365-restore-setup.sh` script.

   #### Terraform

   Apply the generated `main.tf` configuration.

On a subscription of its own, this provisions a dedicated resource group and a management role that Eon uses to run restore operations in the subscription.
On a shared subscription, it adds that role to the resource group that's already there.

#### Grant admin consent

1. Choose **Terraform** or **Bash** with the deployment toggle.
   Eon shows the Microsoft Graph permissions it's requesting.

2. Sign in to the tenant as a Global Administrator and run the generated script:

   #### Bash

   Run the generated `grant-eon-m365-consent.sh` script.

   #### Terraform

   Apply the generated `consent.tf` configuration using the AzureAD provider.

3. Select **I have granted admin consent in Microsoft**.

#### Complete configuration

Choose Eon's display name for the restore tenant, then click **Connect**.

Eon connects the Azure subscription and the Microsoft 365 restore tenant.
You can now restore Microsoft 365 data.

## See also

* [Microsoft 365]
* [About Restore Accounts]
* [Microsoft 365: Connect Source Tenants]
* [Azure: Set Up Azure Tenants]

[Microsoft 365]: /data-protection/saas-workloads/microsoft-365/microsoft-365

[About Restore Accounts]: /data-protection/restoring/restore-accounts/about-restore-accounts

[Microsoft 365: Connect Source Tenants]: /data-protection/saas-workloads/microsoft-365/connections/connect-source-tenants

[Azure: Set Up Azure Tenants]: /data-protection/cloud-workloads/azure/azure-tenants/set-up-azure-tenants