Carbonite Cloud Backup Admin
Quick Start Guide
Table of Contents
Introduction ... 3
Activate Carbonite Cloud Backup Admin Account... 3
Configure your Carbonite Backup for Microsoft 365 account ... 3
Register the Carbonite App ... 4
Discover Content ... 5
Protect Your Data ... 7
Manage Users ... 7
Access the Carbonite Backup for Microsoft 365 Application Portal... 9
Introduction
This document provides a step-by-step guide for getting started with your Carbonite Cloud Backup Admin portal account and configuring the service to protect your Microsoft 365 environment.
Alternatively, there is also a tutorial video for initial configuration of your Carbonite Backup for Microsoft 365 account: https://youtu.be/KR7Xs7x1hzI
The complete Microsoft 365 Backup User Guide is available in our Knowledge Base.
Activate Carbonite Cloud Backup Admin Account
Once Carbonite has created your Carbonite Cloud Backup Admin account, you will receive an email alert containing a link to set your credentials and activate the account.
1. Within your preferred email client, find and open the following email:
a. From: [email protected]
b. Subject: Welcome to Carbonite Cloud Backup Admin
• Be sure to check your Spam folder if you don’t see the email at first.
2. Once opened, click the link starting with
https://backupMicrosoft365.carbonite.com/account/ActiveLocalUser to navigate to the Carbonite Microsoft 365 portal.
3. When the portal opens, enter and confirm a password in the appropriate fields, then click Save.
4. Once the message Password Reset Successful appears, click Sign In Now.
These steps conclude the initial activation of your Carbonite Cloud Backup Admin account. For future logins, be sure to use the URL: https://backupMicrosoft365.carbonite.com/account/login.
Configure your Carbonite Backup for Microsoft 365 account 1. Sign in to the Admin Portal with your administrator account.
On your first sign-in, a setup wizard will walk you through the initial configuration of the service 2. Click License Agreement and Accept once you have reviewed the terms of use.
Register the Carbonite App
3. Select All Permissions. Depending on whether you are already logged into the Microsoft 365 tenant you wish to protect, select one of the following options:
a. Use the current account: Choose this option if you are currently logged in to the Microsoft 365 tenant you wish to configure for backup.
b. Sign out and use another account: Choose this option if you are NOT currently logged in to the Microsoft 365 tenant you wish to configure for backup.
4. Click Create an App Profile - An app profile generates the app that Carbonite Backup for Microsoft 365 Admin functionalities require. Creating an
app profile for Microsoft 365 requires an Microsoft 365 Global Administrator account.
5. A new tab or window will open to the Microsoft Login page, enter your Microsoft 365 global administrator credentials
6. Review the permission set requested by the Carbonite Cloud Backup Admin, then click Accept.
This step authorizes Carbonite to register itself as an enterprise application within the Azure Active Directory of the Microsoft 365 tenant in order to perform backup and restore actions in the most secure and efficient way possible. Registration generates an access token. Your Microsoft 365 credentials are not stored by Carbonite.
For more information about the App Profile, please visit:
https://support.carbonite.com/endpoint/articles/FAQ-Why-is-a-Global-Admin-Account-Required-When- Creating-an-App-Profile-for-Microsoft-365
Once the registration is complete, a message will appear on the Carbonite Microsoft 365 Backup admin portal at the top of the page. Close the tab or window to go back to the original setup wizard.
Click Next on the Register the Carbonite App step of the setup wizard.
Discover Content
7. Discover Content: There are two ways to discover and protect content with the Carbonite Backup for Microsoft 365 App:
• Express Mode (recommended) In this mode, you select the specific Microsoft 365 service(s) (Exchange, OneDrive, SharePoint, Groups, etc…) you wish to protect. Once the service(s)are selected, the Carbonite Backup for Microsoft 365 Application will gather ALL of the objects discovered (mailboxes for Exchange, OneDrive containers, SharePoint sites, etc…) for each service and protect everything within them.
i. Click Create a Scan Profile, this will open a new tab or window with the configuration screen for the Scan Profile.
ii. Check the boxes corresponding to the Microsoft 365 tenant you wish to protect and click Next.
iii. Proceed to step 8.
• Advanced Registration - In this mode, you are able to configure specific rules based on a number of criteria matching attributes within each of the Microsoft 365 services. The objects identified by each rule will be placed in containers, thereby allowing you to delegate administrative access to a certain scope of object within the application. Unless you already know how to subdivide your objects, we recommend starting with the Express Mode option
a. Click New Container
b. Provide a Container Name and a Rule name
c. Add one or more criteria to the rule by selecting the attribute name, the comparison parameter, and the value. Multiple criteria can be configured for each rule using Boolean operators by clicking the symbol:
d. Click Save.
e. Add as many Containers as you need by repeating steps a. through d.
f. When you’re finished setting up containers, move on to the next service, or click Next to finish the Scan Profile configuration.
2. Scan all objects and place them in one container a. Provide a Container Name
b. Move on to the next service or click Next to finish the Scan Profile configuration
8. Provide a name for the Scan Profile.
9. Provide a description (optional).
10. Select the App Profile.
a. If your organization uses multi-factor authentication (MFA), select Advanced options > New Service Account Profile and provide the information for the existing Service Account in Microsoft 365. Click Validation Test and, if successful, click Save.
b. IF you have selected Microsoft 365 Groups or Exchange Public Folders in step 8, you must configure the impersonation account. This user is used to call the Exchange Web Services API and must have an Exchange Online product license assigned in Microsoft 365. Enter the impersonation account login email address and click Validation Test
11. Configure the scan schedule to update the Carbonite Backup for Microsoft 365 application with the objects created or removed in the Microsoft 365 (The selected time follows the time zone of your local computer).
12. Click Save & Run.
Upon receiving the Successfully created the profile message, you can click the Scan Profiles link under What’s next? to check the scanning status.
Depending on the size of the tenant and the number of objects to scan, the scanning process can take a few minutes to run. When the status changes to Finish, the scan has successfully discovered the objects to back up.
Once the registration completes, close the tab or window to go back to the original setup wizard.
Click Next on the Discover Content step of the setup wizard.
Protect Your Data
13. Protect Your Data - Select Carbonite Managed Encryption and click Next. More information about the Bring Your Own Azure Key Vault option is available at
https://support.carbonite.com/endpoint/articles/INF-Managing-Encryption-Profiles
Manage Users
i. Click Invite Users.
ii. A new tab/window will open and give you the option to add new users.
iii. Select the Sign In method:
1. Local User: Credentials are stored and managed in Carbonite Backup for Microsoft 365
a. Enter one or multiple email addresses b. Go to Step 3
2. Microsoft 365 User/Group (recommended): The Microsoft 365 user’s
credentials used to sign in through the Microsoft Login page, which generates an access token. Microsoft credentials are not stored or managed by
Carbonite.
a. Click the blue Directory symbol next to the text box.
b. Select user(s), or group(s) that you want to create users for.
c. Click Add.
3. Choose a role. Tenant Users have limited capabilities as where Service Administrators have full admin access.
4. Click Save.
Using the Microsoft 365 User login will allow the other admins to login to the portal using the “Sign In with Microsoft 365” button from the Admin Portal login page.
Access the Carbonite Backup for Microsoft 365 Application Portal
The Carbonite Backup for Microsoft 365 Application Portal is where you access the backup and recovery features of Carbonite Backup for Microsoft 365.
1. Sign in to the Admin Portal with your administrator account.
2. Click the Carbonite Backup for Microsoft 365 green dot under Home.
The application portal will open in a new tab or window on your web browser, allowing you to manage and monitor backups of your Microsoft 365 environment.
3. When you open the Carbonite Backup for Microsoft 365 Application Portal for the first time, you will need to review the objects discovered by the Scan Profile and click Save and Run Now.
4. The initial backup will start. Depending on the number of objects and their size, the backup can last from a few minutes to several hours. A progression bar with a percentage will indicate backup progress for each service. Percentage will progress on a per object basis, so if you are backing up 10 mailboxes (for example), the progression will move by increments of 10%. When the progress is complete, it will list when the next backup job is scheduled.
Here are a few useful links about actions that can be performed from the Carbonite App Portal:
• Monitor Your Backup
• Configure Alerts
• Change the Backup Frequency
• Restore and Recover Your Data
