Cohesity Alta SaaS Protection Administrator's Guide

Last Published:
Product(s): Veritas Alta SaaS Protection (1.0)
  1. Introduction to Cohesity Alta SaaS Protection
    1.  
      About Cohesity Alta SaaS Protection
    2.  
      Features of Cohesity Alta SaaS Protection
    3.  
      Architecture of Cohesity Alta SaaS Protection
    4.  
      Operational workflow
    5.  
      Extra Data Backup (EDB)
  2. API permissions
    1.  
      API permissions for Microsoft 365 workloads
    2.  
      API permissions for Gmail and Google Drive
    3.  
      System and API permissions for Salesforce
    4.  
      API permissions for Entra ID
    5.  
      App permissions of Web App
  3. Administrator portal (Web UI)
    1.  
      About the Administration portal
    2.  
      Configure the Administration portal
    3.  
      View upgrade history
  4. Manage users and roles
    1.  
      Role-based access control
    2. Permissions tab
      1.  
        Users and groups page
      2.  
        Roles page
      3.  
        Unrecognized users page
      4.  
        Settings page
  5. What is a connector?
    1.  
      What is a connector?
    2.  
      Supported SaaS workloads and backup capabilities
    3.  
      Workflow to protect data using Cohesity Alta SaaS Protection
    4.  
      Know your subscription details
    5.  
      About transient errors
    6.  
      Overview of adding connectors
    7.  
      Configure General settings
    8.  
      Configure Capture scope
    9.  
      Configure User filter
    10.  
      Configure Group filter
    11.  
      Configure Folder filter
    12. Configure credentials
      1.  
        Assign Microsoft 365 apps registration
      2.  
        Microsoft 365 apps registration status
      3.  
        Manually approve Microsoft 365 apps registration
      4.  
        Approve Microsoft 365 apps using the App Consent Grant utility
      5.  
        Microsoft 365 apps recovery
    13.  
      Configure Custom backup policy and guidelines
    14.  
      Configure Delete policy for SharePoint Online and guidelines
    15.  
      Configure Stubbing policy
    16.  
      Guidelines to configure Stubbing policy for SharePoint Online
    17.  
      Schedule a backup
    18.  
      Configure email addresses to get notifications
    19.  
      Review configuration and edit/save/initiate backup
    20.  
      Connectors page
    21.  
      Connector status
    22.  
      Edit connector configuration
    23.  
      Delete connectors
  6. Pre-requisites for Microsoft 365 connectors
    1.  
      Pre-requisites for Microsoft 365 connectors
  7. Protect Microsoft 365 Multi-Geo tenant
    1.  
      Considerations for adding SharePoint/Teams Sites/OneDrive connectors for Microsoft 365 Multi-Geo tenant
  8. Protect Exchange Online data
    1.  
      Add Exchange Online connectors
    2.  
      Configure capture scope for Exchange connectors
  9. Protect SharePoint sites and data
    1.  
      Add SharePoint connectors
    2.  
      Supported and unsupported SharePoint Settings and Types for backup and restore
    3.  
      Supported Sites and List templates for backup and restore
    4.  
      Supported SharePoint permission objects for backup and restore
    5.  
      Configuring capture scope for SharePoint connectors
    6.  
      End-user SharePoint data access in Cohesity Alta SaaS Protection
    7.  
      Run the Delete and Stubbing policies to the SharePoint Online environment
    8.  
      Limitations of SharePoint connector
  10. Protect Teams sites
    1.  
      Add Teams site collections connectors
    2.  
      Configure capture scope for Team site collections connectors
    3.  
      Limitations of Teams site collections connector
  11. Protect OneDrive data
    1.  
      Add OneDrive connectors
    2.  
      Configure capture scope for OneDrive connectors
  12. Protect Teams chats
    1.  
      Add Teams chat connectors
    2.  
      Configure capture scope for Teams chat connectors
    3.  
      Limitations of Teams chat connector
  13. Protect GoogleDrive data
    1.  
      Prerequisites to add Google Drive connectors
    2.  
      Add Google Drive connectors
    3.  
      Configure capture scope for Google Drive connectors
    4.  
      Limitations of Google Drive connector
  14. Protect Gmail data
    1.  
      Prerequisites to add Gmail connectors
    2.  
      Add Gmail connectors
    3.  
      Configure capture scope for Gmail connectors
  15. Protect Audit logs
    1.  
      Add Audit log connectors
    2.  
      Audit log connector limitations
  16. Protect Salesforce data and metada
    1.  
      About Salesforce protection
    2.  
      Key considerations and prerequisites for adding Salesforce connectors
    3.  
      Add Salesforce connectors
    4.  
      Limitations of Salesforce connectors
    5.  
      Salesforce Objects not supported for backup
  17. Protect Entra ID objects
    1.  
      Add Entra ID (Azure AD) connectors
    2.  
      Limitations for Entra ID connector
  18. Protect Box data
    1.  
      Prerequisites for Box connectors configuration
    2.  
      Add Box connectors
    3.  
      Configure capture scope for Box connector
    4.  
      Limitations of Box connector
  19. Protect Slack data
    1.  
      Add Slack connectors
  20. Protect Email/Message data
    1.  
      Prerequisite for Email/message connector
    2.  
      Add Email/Messages file
  21. Configure Retention policies
    1.  
      About WORM policies
    2.  
      Ingestion WORM policies page
    3.  
      Add/edit Ingestion WORM retention policies and guidelines
    4.  
      Add/edit At-Rest WORM retention policies
    5.  
      Add/edit Deletion policies
    6.  
      View deletion history
    7.  
      How to edit the policy evaluation interval?
    8.  
      How to add a Location filter?
    9.  
      How to add a filter?
  22. Perform backups
    1.  
      Perform on-demand/ad-hoc backup
    2.  
      Backup dashboard
    3.  
      Video tutorial for connector troubleshooting
    4. View backup events
      1.  
        About Event suppression
      2.  
        Create event suppression rules
    5.  
      Viewing backup tasks details
  23. View and share backed-up data
    1.  
      Browse backed-up data
    2.  
      Share data
    3.  
      Remove data sharing
  24. Analytics
    1.  
      About analytics
    2.  
      Gain insights into storage utilization
    3.  
      Gain insights into storage utilization for Entra ID and Salesforce connectors
    4.  
      Gain insights into blocked activities, most active users, and more
    5.  
      Gain insights into data volume (size and item count) on legal hold
    6.  
      Gain insights into data volume (size and item count) saved in different Enhanced cases
    7.  
      Gain insights into data volume (size and count) under different policies
    8.  
      Gain insights into data volume (size and item count) under different Tags
    9.  
      Gain insights into data volume (size and item count) under different Tags behaviors
    10.  
      Gain insights into storage savings after deduplication and compression
    11.  
      Gain insights into data ingestion trends
  25. Perform restores using Administration portal
    1.  
      About restore
    2.  
      Prerequisites for restore
    3.  
      Restore Exchange Online mailboxes
    4. Restore SharePoint/OneDrive/Teams Sites and data
      1.  
        Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      2.  
        Limitations of SharePoint sites and data restore
    5. Restore Teams chat messages and Teams channel conversations
      1.  
        Limitations of Teams chat data restore
    6.  
      Restore O365 audit logs
    7. Restore Box data
      1.  
        Limitations of Box data restore
    8. Restore Google Drive data
      1.  
        About the overwrite restore behavior for Box/Google Drive data
    9.  
      Restore Gmail data
    10. About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
      1.  
        Guidelines for Schema changes in Salesforce organization to prevent restore failures
      2.  
        Restore Standard and Custom objects (Structured data restore)
      3.  
        Custom Object restore - post processing steps
      4.  
        Restore specific Records (Structured data) using Query filters
      5.  
        Restore Salesforce CRM Content (Unstructured data restore)
      6.  
        Restore Salesforce files/documents in Public/Shared libraries (Unstructured data restore)
      7.  
        Limitations of Salesforce Data restore
      8.  
        Salesforce Objects not supported for restore
      9.  
        Key considerations for Salesforce Metadata restore
      10.  
        Restore Salesforce Metadata
      11.  
        Limitations of Salesforce Metadata backup and restore
    11. About Entra ID (Azure AD) objects and records restore
      1.  
        Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restore an Entra ID object
      4.  
        Restore specific records within Entra ID objects
    12.  
      Restore Slack data
    13.  
      Restore data to File server
    14.  
      Set default restore point
    15.  
      Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
    16.  
      Configure email addresses for notifications
    17.  
      Downloading an item
  26. Restore dashboard
    1.  
      About Restore dashboard
    2.  
      Restore job statuses
    3.  
      How to cancel a restore job?
    4.  
      View the restore events
  27. Install services and utilities
    1.  
      About services and utilities
    2.  
      Pre-requisites to download and install services and utilities
    3.  
      Downloading services and utilities
    4.  
      Where to install the services and utilities
    5.  
      Installing or upgrading services and utilities
    6.  
      Configuring service accounts for services and utilities
    7. About the Apps Consent Grant Utility
      1.  
        Downloading the Apps Consent Grant Utility
      2.  
        Installing or upgrading the Apps Consent Grant Utility
      3.  
        Post-installation activities for the Apps Consent Grant Utility
  28. Discovery
    1.  
      About eDiscovery/searches
    2.  
      Add search templates
    3.  
      Add Discovery cases
    4.  
      Perform ad hoc search and add data to Discovery cases
    5.  
      View data in Discovery cases
    6.  
      Edit Discovery cases
    7.  
      DeleteDiscovery cases
    8.  
      Assign Discovery cases to users
  29. Configure Tagging polices
    1.  
      About the Tagging policy
    2.  
      Add Tags
    3.  
      Add/edit Tagging policies
    4. Adding regular expressions
      1.  
        RegEx and query examples for PII detection
  30. Configure Tiering policy
    1. About the Tiering policy
      1.  
        Storage tiering and full-text search
      2.  
        User experience on storage tiering
      3.  
        Priority for storage Tiering
    2.  
      Add/edit Tiering policies
  31. Auditing
    1.  
      Auditing
  32. Manage Stors (Storages)
    1.  
      Viewing Stors (Storages)
    2.  
      Requesting a new Stor
    3.  
      General tab
    4.  
      Version control settings
    5.  
      Metadata tab
    6.  
      Statistical policies tab
    7.  
      Location-Mapping tab
    8.  
      Backup tab
    9.  
      Custodian Groups tab
    10.  
      Advanced tab
    11.  
      Analytics tab

Limitations of SharePoint sites and data restore

The limitations for the restore of SharePoint sites and data restore are described in the following table:

Table:

Limitations

Description

Point-in-time restore of metadata.

The point-in-time restore of metadata for site collections, sub-sites, and lists is not supported because it maintains a single copy of their metadata.

Exception: This limitation does not apply to individual items.

Point-in-time restore of permissions.

Point-in-time restores of permissions are not supported as it maintains a single copy of permissions.

Restore of site and site collection settings.

Backup and restore of the following site and site collection settings are not supported:

  • Site collection and Site search settings.

  • Sort order within Regional settings.

  • Workflow settings under Site Administration.

The language settings are restored only for the following scenarios:

  • If the Site collection is created during the restore.

  • If the Site collection already exists, at least one language is selected under the Language settings > Available languages section in the Site settings.

Restore of the order in Quick Launch links.

When a site or sub-site is restored to a new location, the order of links in the Look and Feel > Quick Launch settings is not retained.

Recreation of Visio sites.

Recreating Visio sites from scratch is not supported.

Restore of missing SharePoint Group descriptions.

SharePoint Group descriptions are not restored when a site collection is restored to a new location.

Restore of the Managed metadata and Lookup Columns.

When a list is recreated, Managed Metadata and Lookup column types are skipped, and the data for these columns is not restored.

If the original column exists in the destination list with identical customization and the same name as in the backup, the data for these columns can be restored to the list.

Backup and restore of the List view.

List views are not included in the backup and restore process. When lists are recreated, the columns that are displayed in the default view at the time of backup are retained.

Restore of the Column in List.

The order of columns is not maintained when a list is restored from scratch, especially for calculated columns.

Restore of User References in List items.

When restoring list items with fields containing user references, the SharePoint app is displayed instead of the original user. It occurs with fields like a document or item's Author/Editor field, the Reply By field of a discussion item, and so on. The following scenarios may occur:

  • If the original user is not available in the directory.

  • If the user is external, sharing is disabled at the restore destination site.

Backup and restore of the advanced settings of the Lists.

Backup and restore of the following advanced settings of Lists are not supported:

  • Opening Documents in the Browser

  • Dialogs

  • Order of Survey questions

Restore of Location-Related Columns.

All location-related columns (for example, state, city) are created during restore.

Restore of the Access permissions.

In the case of SharePoint and OneDrive, you can restore the direct-access permissions that are assigned to users but not the link-based access permissions.

The restore of link-based access is not supported.

Restore of Wiki and Web Part pages.

Wiki and Web Part pages are not supported for backup and restore. If they do not exist at the destination, they are restored as empty pages. Also, restoring the Web Parts of the Pages is not supported.

Restore of Home.aspx.

Restore of Home.aspx is not supported.

Restore of comment's versions.

Backup and restore of the versions of comments and approval comments in the document is not supported.

Restore of Workflow activation.

The restore process does not turn off workflows during restore, which means the restore can initiate unintended workflows.

Restore of the redirected Lists, Folders, or items.

For the redirected lists, folders, or items being restored to another site, SharePoint default group roles are not applied to any SharePoint object.

Restore of the Discussion Board Reply.

On the Discussion board, when a response to a message or reply is restored, it appears as a reply to the original discussion thread.

Restore of the unchanged OneNote files.

Any new OneNote file that is not backed up earlier remains unchanged and is not removed, even if the Overwrite items option is selected.

Tenant-to-Tenant Restoration.

An Access denied message is displayed when restoring a site collection to a different tenant's location. To resolve this error, disable the DenyAddAndCustomizePages permission on SharePoint Online for the site collections. This allows the necessary customization and configuration of the restored site collection in the new tenant's environment.

Restore of the Web Part page access.

When restoring a Web Part Page to a destination location, an Access denied message can be displayed. To resolve this error, disable the DenyAddAndCustomizePages permission on SharePoint Online for the site collection.

Restore of the duplicate items in site collection.

When restoring a site collection to another site collection, duplicate items are created at the destination due to metadata mismatches with default items in the Reusable Content list.

Duplicate Values error.

When restoring a list item, the error can be displayed due to the Enforce unique values setting from one of the list columns.

To restore the item manually download the item to your local computer.

Sub-site and list creation errors.

Sub-site and list creation can fail with errors.

It may refer to a non-existent file or folder. It may also refer to a valid file or folder that is not on the current web.

When it happens, the location in which the error has occurred needs to be restored again.

Identically Named Lists and sub-sites conflicts.

Restoring the sites that have more than one list or sub-site with the same title is not supported. During the restore operation, all the identically named lists and sub-sites are placed onto a single list and sub-site at the destination.

Restore of the reserved Column Names.

SharePoint Online reserves specific column names for its internal use. The restore process may fail if the reserved names are used as custom column names in a list.

Restore of the Default Site page.

When restoring a default site page over an existing site, the first published version is created.

Restore of the Image Column.

The list is restored when you restore an individual list with an image column to an alternate location. The images within the list are not restored because they have a dependency on the Site Assets document library.

When you perform a complete site restore to an alternate location, the image columns within the sites are restored as expected.

SharePoint index.

The backup and restore of the SharePoint index is not supported. When restoring items the SharePoint indexer will index the restored items in the background.

Information Protection Management setting enabled items

The files with the Information Rights Management (IRM) setting enabled should be restored to the same library or list at the time of the backup.

The IRM setting of the library should be unchanged, otherwise the file cannot be opened after its restore.

Note:

The SharePoint files for which the IRM setting is enabled at the time of backup cannot be opened after their download.

Restore of Sensitivity labeled items.

For the items with Sensitivity labels configured for encryption, only restores from scratch for a single version can be performed.

Restoring multiple versions and overwrite restores are not supported, as SharePoint does not allow the creation of a new version on top of such items.

Restore of the list items to lists which have publishing and approval requirements

  • Items are not published or approved if Restore all versions is not selected.

  • Items will be published and/or approved based on the following conditions:

    • The destination list must have either of these options enabled in SharePoint Online; the Create major and minor (draft) versions option for publishing, or the Content approval option for approval.

    • The version number of the item restored must be a major version.

    • NetBackup cannot retain the original author and date when restoring items to lists that require approval. The Modified By field will display the SharePoint App. To address this, NetBackup adds a comment indicating the original author and date.