immutable vaults: what is the best practice for an SAP backup

Question

We would like to enable immutable vaults for our backup. we would also like to change the state to "locked"

but:

If we want our SAP backup not to be retained as long as other VM backups, do we need to put it in a separately vault with a different backup policy?

Is there some best practice documentation about this

Answer 1

https://learn.microsoft.com/en-us/azure/backup/backup-azure-immutable-vault-concept?tabs=recovery-services-vault

Immutability as a capability is enabled at the vault level, the retention (which in such cases becomes immutable) gets applied per each datasource's backup policy.

If one want's to apply immutability to one set of backups but not other one can keep them in separate vaults , but in your case since you are looking enable immutability to both sets of backups ( just with different retentions) you can keep them in same vault with bakcup policies stating different retention periods.