Share via


Vaults - Get

Get the Vault details.

GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.RecoveryServices/vaults/{vaultName}?api-version=2025-02-01

URI Parameters

Name In Required Type Description
resourceGroupName
path True

string

minLength: 1
maxLength: 90

The name of the resource group. The name is case insensitive.

subscriptionId
path True

string

minLength: 1

The ID of the target subscription.

vaultName
path True

string

The name of the Vault

api-version
query True

string

minLength: 1

The API version to use for this operation.

Responses

Name Type Description
200 OK

Vault

Azure operation completed successfully.

Other Status Codes

CloudError

An unexpected error response.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

Get Recovery Services Resource

Sample request

GET https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-02-01

Sample response

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "bcdrSecurityLevel": "Poor",
    "monitoringSettings": {
      "azureMonitorAlertSettings": {
        "alertsForAllFailoverIssues": "Disabled",
        "alertsForAllJobFailures": "Enabled",
        "alertsForAllReplicationIssues": "Enabled"
      },
      "classicAlertSettings": {
        "alertsForCriticalOperations": "Disabled",
        "emailNotificationsForSiteRecovery": "Enabled"
      }
    },
    "privateEndpointConnections": [
      {
        "id": "/subscriptions/6c48fa17-39c7-45f1-90ac-47a587128ace/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/Vaults/pemsi-ecy-rsv2/privateEndpointConnections/pe114-pemsi-ecy-rsv.5944358949303501042.backup.75061caa-cba4-4849-8e09-608da4914aad",
        "properties": {
          "groupIds": [
            "AzureBackup"
          ],
          "privateEndpoint": {
            "id": "/subscriptions/6c48fa17-39c7-45f1-90ac-47a587128ace/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.Network/privateEndpoints/pe114-pemsi-ecy-rsv"
          },
          "privateLinkServiceConnectionState": {
            "description": "None",
            "actionsRequired": "None",
            "status": "Approved"
          },
          "provisioningState": "Succeeded"
        }
      }
    ],
    "privateEndpointStateForBackup": "Enabled",
    "privateEndpointStateForSiteRecovery": "None",
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled",
    "redundancySettings": {
      "crossRegionRestore": "Enabled",
      "standardTierStorageRedundancy": "GeoRedundant"
    },
    "secureScore": "None",
    "securitySettings": {
      "immutabilitySettings": {
        "state": "Disabled"
      },
      "multiUserAuthorization": "Disabled",
      "softDeleteSettings": {
        "enhancedSecurityState": "Enabled",
        "softDeleteRetentionPeriodInDays": 14,
        "softDeleteState": "Enabled"
      },
      "sourceScanConfiguration": {
        "sourceScanIdentity": {
          "operationIdentityType": "SystemAssigned"
        },
        "state": "Enabled"
      }
    }
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Definitions

Name Description
AlertsState
AssociatedIdentity

Identity details to be used for an operation

AzureMonitorAlertSettings

Settings for Azure Monitor based alerts

BackupStorageVersion

Backup storage version

BCDRSecurityLevel

Security levels of Recovery Services Vault for business continuity and disaster recovery

ClassicAlertSettings

Settings for classic alerts

CloudError

An error response from Azure Backup.

CmkKekIdentity

The details of the identity used for CMK

CmkKeyVaultProperties

The properties of the Key Vault which hosts CMK

createdByType

The type of identity that created the resource.

CrossRegionRestore

Flag to show if Cross Region Restore is enabled on the Vault or not

CrossSubscriptionRestoreSettings

Settings for Cross Subscription Restore Settings

CrossSubscriptionRestoreState
EnhancedSecurityState
Error

The resource management error response.

ErrorAdditionalInfo

The resource management error additional info.

IdentityData

Identity for the resource.

IdentityType

Identity type that should be used for an operation.

ImmutabilitySettings

Immutability Settings of vault

ImmutabilityState
InfrastructureEncryptionState

Enabling/Disabling the Double Encryption state

MonitoringSettings

Monitoring Settings of the vault

MultiUserAuthorization

MUA Settings of vault

PrivateEndpoint

The Private Endpoint network resource that is linked to the Private Endpoint connection.

PrivateEndpointConnection

Private Endpoint Connection Response Properties.

PrivateEndpointConnectionStatus

Gets or sets the status.

PrivateEndpointConnectionVaultProperties

Information to be stored in Vault properties as an element of privateEndpointConnections List.

PrivateLinkServiceConnectionState

Gets or sets private link service connection state.

ProvisioningState

Gets or sets provisioning state of the private endpoint connection.

PublicNetworkAccess

property to enable or disable resource provider inbound network traffic from public clients

ResourceIdentityType

The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.

ResourceMoveState

The State of the Resource after the move operation

RestoreSettings

Restore Settings of the vault

SecureScoreLevel

Secure Score of Recovery Services Vault

SecuritySettings

Security Settings of the vault

Sku

Identifies the unique system identifier for each Azure resource.

SkuName

Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig

SoftDeleteSettings

Soft delete Settings of vault

SoftDeleteState
SourceScanConfiguration

Source scan configuration of vault

StandardTierStorageRedundancy

The storage redundancy setting of a vault

State
systemData

Metadata pertaining to creation and last modification of the resource.

TriggerType

The way the vault upgrade was triggered.

UpgradeDetails

Details for upgrading vault.

UserIdentity

A resource identity that is managed by the user of the service.

Vault

Resource information, as returned by the resource provider.

VaultPrivateEndpointState

Private endpoint state for backup.

VaultProperties

Properties of the vault.

VaultPropertiesEncryption

Customer Managed Key details of the resource.

VaultPropertiesMoveDetails

The details of the latest move operation performed on the Azure Resource

VaultPropertiesRedundancySettings

The redundancy Settings of a Vault

VaultSubResourceType

Subresource type for vault AzureBackup, AzureBackup_secondary or AzureSiteRecovery

VaultUpgradeState

Status of the vault upgrade operation.

AlertsState

Value Description
Enabled
Disabled

AssociatedIdentity

Identity details to be used for an operation

Name Type Description
operationIdentityType

IdentityType

Identity type that should be used for an operation.

userAssignedIdentity

string

User assigned identity to be used for an operation if operationIdentityType is UserAssigned.

AzureMonitorAlertSettings

Settings for Azure Monitor based alerts

Name Type Description
alertsForAllFailoverIssues

AlertsState

alertsForAllJobFailures

AlertsState

alertsForAllReplicationIssues

AlertsState

BackupStorageVersion

Backup storage version

Value Description
V1
V2
Unassigned

BCDRSecurityLevel

Security levels of Recovery Services Vault for business continuity and disaster recovery

Value Description
Poor
Fair
Good
Excellent

ClassicAlertSettings

Settings for classic alerts

Name Type Description
alertsForCriticalOperations

AlertsState

emailNotificationsForSiteRecovery

AlertsState

CloudError

An error response from Azure Backup.

Name Type Description
error

Error

The resource management error response.

CmkKekIdentity

The details of the identity used for CMK

Name Type Description
useSystemAssignedIdentity

boolean

Indicate that system assigned identity should be used. Mutually exclusive with 'userAssignedIdentity' field

userAssignedIdentity

string

The user assigned identity to be used to grant permissions in case the type of identity used is UserAssigned

CmkKeyVaultProperties

The properties of the Key Vault which hosts CMK

Name Type Description
keyUri

string

The key uri of the Customer Managed Key

createdByType

The type of identity that created the resource.

Value Description
User
Application
ManagedIdentity
Key

CrossRegionRestore

Flag to show if Cross Region Restore is enabled on the Vault or not

Value Description
Enabled
Disabled

CrossSubscriptionRestoreSettings

Settings for Cross Subscription Restore Settings

Name Type Description
crossSubscriptionRestoreState

CrossSubscriptionRestoreState

CrossSubscriptionRestoreState

Value Description
Enabled
Disabled
PermanentlyDisabled

EnhancedSecurityState

Value Description
Invalid
Enabled
Disabled
AlwaysON

Error

The resource management error response.

Name Type Description
additionalInfo

ErrorAdditionalInfo[]

The error additional info.

code

string

The error code.

details

Error[]

The error details.

message

string

The error message.

target

string

The error target.

ErrorAdditionalInfo

The resource management error additional info.

Name Type Description
info

object

The additional info.

type

string

The additional info type.

IdentityData

Identity for the resource.

Name Type Description
principalId

string

The principal ID of resource identity.

tenantId

string

The tenant ID of resource.

type

ResourceIdentityType

The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.

userAssignedIdentities

<string,  UserIdentity>

The list of user-assigned identities associated with the resource. The user-assigned identity dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.

IdentityType

Identity type that should be used for an operation.

Value Description
SystemAssigned
UserAssigned

ImmutabilitySettings

Immutability Settings of vault

Name Type Description
state

ImmutabilityState

ImmutabilityState

Value Description
Disabled
Unlocked
Locked

InfrastructureEncryptionState

Enabling/Disabling the Double Encryption state

Value Description
Enabled
Disabled

MonitoringSettings

Monitoring Settings of the vault

Name Type Description
azureMonitorAlertSettings

AzureMonitorAlertSettings

Settings for Azure Monitor based alerts

classicAlertSettings

ClassicAlertSettings

Settings for classic alerts

MultiUserAuthorization

MUA Settings of vault

Value Description
Invalid
Enabled
Disabled

PrivateEndpoint

The Private Endpoint network resource that is linked to the Private Endpoint connection.

Name Type Description
id

string

Gets or sets id.

PrivateEndpointConnection

Private Endpoint Connection Response Properties.

Name Type Description
groupIds

VaultSubResourceType[]

Group Ids for the Private Endpoint

privateEndpoint

PrivateEndpoint

The Private Endpoint network resource that is linked to the Private Endpoint connection.

privateLinkServiceConnectionState

PrivateLinkServiceConnectionState

Gets or sets private link service connection state.

provisioningState

ProvisioningState

Gets or sets provisioning state of the private endpoint connection.

PrivateEndpointConnectionStatus

Gets or sets the status.

Value Description
Pending
Approved
Rejected
Disconnected

PrivateEndpointConnectionVaultProperties

Information to be stored in Vault properties as an element of privateEndpointConnections List.

Name Type Description
id

string

Format of id subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.[Service]/{resource}/{resourceName}/privateEndpointConnections/{connectionName}.

location

string

The location of the private Endpoint connection

name

string

The name of the private Endpoint Connection

properties

PrivateEndpointConnection

Private Endpoint Connection Response Properties.

type

string

The type, which will be of the format, Microsoft.RecoveryServices/vaults/privateEndpointConnections

PrivateLinkServiceConnectionState

Gets or sets private link service connection state.

Name Type Description
actionsRequired

string

Gets or sets actions required.

description

string

Gets or sets description.

status

PrivateEndpointConnectionStatus

Gets or sets the status.

ProvisioningState

Gets or sets provisioning state of the private endpoint connection.

Value Description
Succeeded
Deleting
Failed
Pending

PublicNetworkAccess

property to enable or disable resource provider inbound network traffic from public clients

Value Description
Enabled
Disabled

ResourceIdentityType

The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.

Value Description
SystemAssigned
None
UserAssigned
SystemAssigned, UserAssigned

ResourceMoveState

The State of the Resource after the move operation

Value Description
Unknown
InProgress
PrepareFailed
CommitFailed
PrepareTimedout
CommitTimedout
MoveSucceeded
Failure
CriticalFailure
PartialSuccess

RestoreSettings

Restore Settings of the vault

Name Type Description
crossSubscriptionRestoreSettings

CrossSubscriptionRestoreSettings

Settings for CrossSubscriptionRestore

SecureScoreLevel

Secure Score of Recovery Services Vault

Value Description
None
Minimum
Adequate
Maximum

SecuritySettings

Security Settings of the vault

Name Type Description
immutabilitySettings

ImmutabilitySettings

Immutability Settings of a vault

multiUserAuthorization

MultiUserAuthorization

MUA Settings of a vault

softDeleteSettings

SoftDeleteSettings

Soft delete Settings of a vault

sourceScanConfiguration

SourceScanConfiguration

Source scan configuration of vault

Sku

Identifies the unique system identifier for each Azure resource.

Name Type Description
capacity

string

The sku capacity

family

string

The sku family

name

SkuName

Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig

size

string

The sku size

tier

string

The Sku tier.

SkuName

Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig

Value Description
Standard
RS0

SoftDeleteSettings

Soft delete Settings of vault

Name Type Description
enhancedSecurityState

EnhancedSecurityState

softDeleteRetentionPeriodInDays

integer (int32)

Soft delete retention period in days

softDeleteState

SoftDeleteState

SoftDeleteState

Value Description
Invalid
Enabled
Disabled
AlwaysON

SourceScanConfiguration

Source scan configuration of vault

Name Type Description
sourceScanIdentity

AssociatedIdentity

Identity details to be used for an operation

state

State

StandardTierStorageRedundancy

The storage redundancy setting of a vault

Value Description
Invalid
LocallyRedundant
GeoRedundant
ZoneRedundant

State

Value Description
Invalid
Enabled
Disabled

systemData

Metadata pertaining to creation and last modification of the resource.

Name Type Description
createdAt

string (date-time)

The timestamp of resource creation (UTC).

createdBy

string

The identity that created the resource.

createdByType

createdByType

The type of identity that created the resource.

lastModifiedAt

string (date-time)

The timestamp of resource last modification (UTC)

lastModifiedBy

string

The identity that last modified the resource.

lastModifiedByType

createdByType

The type of identity that last modified the resource.

TriggerType

The way the vault upgrade was triggered.

Value Description
UserTriggered
ForcedUpgrade

UpgradeDetails

Details for upgrading vault.

Name Type Description
endTimeUtc

string (date-time)

UTC time at which the upgrade operation has ended.

lastUpdatedTimeUtc

string (date-time)

UTC time at which the upgrade operation status was last updated.

message

string

Message to the user containing information about the upgrade operation.

operationId

string

ID of the vault upgrade operation.

previousResourceId

string

Resource ID of the vault before the upgrade.

startTimeUtc

string (date-time)

UTC time at which the upgrade operation has started.

status

VaultUpgradeState

Status of the vault upgrade operation.

triggerType

TriggerType

The way the vault upgrade was triggered.

upgradedResourceId

string

Resource ID of the upgraded vault.

UserIdentity

A resource identity that is managed by the user of the service.

Name Type Description
clientId

string

The client ID of the user-assigned identity.

principalId

string

The principal ID of the user-assigned identity.

Vault

Resource information, as returned by the resource provider.

Name Type Description
etag

string

etag for the resource.

id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

identity

IdentityData

Identity for the resource.

location

string

The geo-location where the resource lives

name

string

The name of the resource

properties

VaultProperties

Properties of the vault.

sku

Sku

Identifies the unique system identifier for each Azure resource.

systemData

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

tags

object

Resource tags.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

VaultPrivateEndpointState

Private endpoint state for backup.

Value Description
None
Enabled

VaultProperties

Properties of the vault.

Name Type Description
backupStorageVersion

BackupStorageVersion

Backup storage version

bcdrSecurityLevel

BCDRSecurityLevel

Security levels of Recovery Services Vault for business continuity and disaster recovery

encryption

VaultPropertiesEncryption

Customer Managed Key details of the resource.

monitoringSettings

MonitoringSettings

Monitoring Settings of the vault

moveDetails

VaultPropertiesMoveDetails

The details of the latest move operation performed on the Azure Resource

moveState

ResourceMoveState

The State of the Resource after the move operation

privateEndpointConnections

PrivateEndpointConnectionVaultProperties[]

List of private endpoint connection.

privateEndpointStateForBackup

VaultPrivateEndpointState

Private endpoint state for backup.

privateEndpointStateForSiteRecovery

VaultPrivateEndpointState

Private endpoint state for site recovery.

provisioningState

string

Provisioning State.

publicNetworkAccess

PublicNetworkAccess

property to enable or disable resource provider inbound network traffic from public clients

redundancySettings

VaultPropertiesRedundancySettings

The redundancy Settings of a Vault

resourceGuardOperationRequests

string[]

ResourceGuardOperationRequests on which LAC check will be performed

restoreSettings

RestoreSettings

Restore Settings of the vault

secureScore

SecureScoreLevel

Secure Score of Recovery Services Vault

securitySettings

SecuritySettings

Security Settings of the vault

upgradeDetails

UpgradeDetails

Details for upgrading vault.

VaultPropertiesEncryption

Customer Managed Key details of the resource.

Name Type Description
infrastructureEncryption

InfrastructureEncryptionState

Enabling/Disabling the Double Encryption state

kekIdentity

CmkKekIdentity

The details of the identity used for CMK

keyVaultProperties

CmkKeyVaultProperties

The properties of the Key Vault which hosts CMK

VaultPropertiesMoveDetails

The details of the latest move operation performed on the Azure Resource

Name Type Description
completionTimeUtc

string (date-time)

End Time of the Resource Move Operation

operationId

string

OperationId of the Resource Move Operation

sourceResourceId

string

Source Resource of the Resource Move Operation

startTimeUtc

string (date-time)

Start Time of the Resource Move Operation

targetResourceId

string

Target Resource of the Resource Move Operation

VaultPropertiesRedundancySettings

The redundancy Settings of a Vault

Name Type Description
crossRegionRestore

CrossRegionRestore

Flag to show if Cross Region Restore is enabled on the Vault or not

standardTierStorageRedundancy

StandardTierStorageRedundancy

The storage redundancy setting of a vault

VaultSubResourceType

Subresource type for vault AzureBackup, AzureBackup_secondary or AzureSiteRecovery

Value Description
AzureBackup
AzureBackup_secondary
AzureSiteRecovery

VaultUpgradeState

Status of the vault upgrade operation.

Value Description
Unknown
InProgress
Upgraded
Failed