Set up Microsoft 365 Backup

Get started with Microsoft 365 Backup by following these simple three steps in the Microsoft 365 admin center.

Diagram showing the three-step setup process for Microsoft 365 Backup.

Permissions

You must be a SharePoint Administrator or Global Administrator to be able to access the Microsoft 365 admin center and set up Microsoft 365 Backup.

Important

Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

Step 1: Set up pay-as-you-go billing

To set up pay-as-you-go for Microsoft 365 Backup, you need to have this information:

  • Valid Azure subscription. An Azure subscription provides a logical container for your resources. Each Azure resource is associated with only one subscription. Creating a subscription is the first step in adopting Azure. To learn more about Azure, see Azure fundamental concepts.
  • Resource group. A resource group provides a logical grouping of resources within an Azure subscription.
  • Region. The region in which you want to register the service.
  • Owner or contributor. Name of an owner or contributor role on the Azure subscription.

Once you have the information on this list, you're ready to begin. As a first step, you should link an Azure subscription in Microsoft Syntex pay-as-you-go, if you haven't already done so. Although Microsoft 365 Backup isn't part of the Microsoft Syntex product suite, this offering is still using the Syntex billing setup for consistency with other Microsoft 365 pay-as-you-go offerings.

To set up pay-as-you-go billing for Microsoft 365 Backup, follow these steps:

  1. In the Microsoft 365 admin center, select Setup.

  2. Under Files and content, select Automate content processes with Syntex.

  3. On the Automate content processes with Syntex page, select Go to Syntex settings.

    Screenshot of the Set up billing option in the Microsoft 365 admin center.

    Note

    To set up pay-as-you-go billing for Microsoft 365 Backup, you must provide an owner or contribution role on the Azure subscription to be used.

  4. If you don't have an Azure subscription or resource group, follow these steps. If you have an Azure subscription and resource group, go directly to step 5.

    To create a new Azure subscription with the same organization and Microsoft Entra tenant as your Microsoft 365 subscription:

    1. Sign in to the Azure portal with your Microsoft 365 admin, Microsoft Entra DC admin, or Global Administrator account.

      Important

      Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

    2. In the left navigation, select Subscriptions, and then select Add.

    3. On the Add subscription page, select an offer and complete the payment information and agreement.

    To create a new Azure resource group:

    1. On the Set up pay-as-you-go billing panel, select Learn more about Azure resource groups.

    2. Or, you can follow steps in Manage Azure resource groups by using the Azure portal to create a resource group.

    Screenshot of the Set up pay-as-you-go billing panel in the Microsoft 365 admin center.

    Note

    The resource group should be mapped to the Azure subscription you provided when you set up pay-as-you-go.

  5. If you have an Azure subscription, follow these steps:

    1. On the Set up pay-as-you-go billing panel, under Azure subscription, select the subscription from the dropdown list.

      Note

      The subscription dropdown list won't populate if you don't have an owner or contributor on the subscription.

      Screenshot of the Set up pay-as-you-go billing panel showing the Azure subscription dropdown list.

    2. Under Resource group, select the resource group from the dropdown list.

    3. Under Region, select the region from the dropdown list.

    4. Review and accept the terms of service, and then select Save.

You have successfully set up billing. You can proceed to turn on Microsoft 365 Backup.

Note

Any subsequent changes made to the billing for Microsoft 365 Backup in the Microsoft 365 admin center or the Azure portal can take up to 24 hours to become effective.

Note

There will be only one billing profile created. Microsoft 365 Backup currently doesn't support multiple billing profiles.

Step 2: Turn on Microsoft 365 Backup

To turn on Microsoft 365 Backup, you need to go to the Microsoft 365 admin center.

  1. In the Microsoft 365 admin center, select Setup.

  2. Under Billing and licenses, select Activate pay-as-you-go services.

  3. On the Activate pay-as-you-go services page, select Get started.

  4. On the Pay-as-you-go services page, select the Settings tab, and then select Syntex services.

  5. On the Syntex page, in the Storage section, select Backup.

  6. On the Backup panel, select Turn on.

  7. On Turn on Backup panel, review the applicable terms of service for Microsoft 365, and then select Save.

Step 3: Create backup policies to protect your data

Now that Microsoft 365 Backup is enabled for your organization, follow through to create policies and start protecting your content.

  1. Go to the Microsoft 365 admin center.

  2. Select Settings.

  3. Select Microsoft 365 Backup from the list of products.

    Screenshot of the Microsoft 365 admin center panel showing Settings and Microsoft 365 Backup.

  4. Create backup policies for OneDrive, SharePoint, or Exchange.

Admin roles and backup management privileges

Only tenant-level admins can create and manage backups using Microsoft 365 Backup for their users. End users don't have the ability to enable backup or restores for their user account, distribution lists, mailboxes, or sites. It’s important to note that your admin role determines which products you can manage with Microsoft 365 Backup. We have also introduced a new dedicated role for this tool, the Microsoft 365 Backup Administrator, that can control the entire tool. For more information about this role, see Microsoft 365 Backup Administrator.

Admin role OneDrive SharePoint Exchange
Global Administrator
SharePoint Administrator
Exchange Administrator
Microsoft 365 Backup Administrator

Glossary

  • Protection units – SharePoint sites, OneDrive accounts, or Exchange Online mailboxes backed up by the Microsoft 365 Backup tool.

  • Restore point – A prior point in time from which you can restore a version of your content and metadata. If the protection unit from a prior point in time is identical to the present state of your data, then a restore from that point has no effect on your current data.

  • RPO – Recovery point objective, or how close in time the most recent restore point is to an impacting event.

  • RTO – Recovery time objective, or how fast a restore to a prior point in time might complete.