← West Coast IT Hipster
Azure · Sep 10

Azure AD and App Registrations

Azure Service accounts can be chosen from an Existing Account or created automatically on configuration. This gives greater control and provides the API access required by the VBAzure appliance. Organizations will likely prefer to set this themselves, and not let the application create. In order to use a preexisting account, an App Registration must be made in Azure Active Directory. Help Center Link

Return to your Home Screen Search for Azure Active Directory feature

Return to your Home Screen Search for Azure Active Directory feature

App registrations

  1. From the left-hand menu then Find and select App registrations
  2. Click +New registration

Name Registration and then select Register

Name Registration (Note Registration name for later) and then select Register from below.

Access Control IAM

  1. Using the Azure Portal Menu return to your Resource Group
  2. Select Access Control (IAM) from the left
  3. Select +ADD and Add Role Assignment

Add role assignment

Select Role Owner

  1. Select Role Owner
  2. Assign Access to
  3. Azure AD, group or service principal
  4. In the Search Field put in App Registration Name and select
  5. Click Save
  6. From the Azure Portal Menu find Azure Active Directory

Copy the Application ID and Directory ID

  1. Select App Registrations again and choose your newly created registration
  2. Copy the Application ID and Directory ID. Copy to Note pad.

Certificates and secrets

  1. Select Certificates & secrets
  2. Add New client secret and copy to notepad.

That is all. Easy setup, just need to know where to go. Use the information you gathered to configured the Azure Account in the Veeam Appliance. Then get rid of that Notepad file. Rememebr- the Secret will not be available again- you will need to recreate it should you need to reconfigured. Not a big deal- in fact it allows you to revoke and setup new Secrets for different apps.