Cohesity Alta SaaS Protection Administrator's Guide
- Introduction to Cohesity Alta SaaS Protection
- API permissions
- Administrator portal (Web UI)
- Manage users and roles
- What is a connector?
- What is a connector?
- Supported SaaS workloads and backup capabilities
- Workflow to protect data using Cohesity Alta SaaS Protection
- Know your subscription details
- About transient errors
- Overview of adding connectors
- Configure General settings
- Configure Capture scope
- Configure User filter
- Configure Group filter
- Configure Folder filter
- Configure credentials
- Configure Custom backup policy and guidelines
- Configure Delete policy for SharePoint Online and guidelines
- Configure Stubbing policy
- Guidelines to configure Stubbing policy for SharePoint Online
- Schedule a backup
- Configure email addresses to get notifications
- Review configuration and edit/save/initiate backup
- Connectors page
- Connector status
- Edit connector configuration
- Delete connectors
- Pre-requisites for Microsoft 365 connectors
- Protect Microsoft 365 Multi-Geo tenant
- Protect Exchange Online data
- Protect SharePoint sites and data
- Add SharePoint connectors
- Supported and unsupported SharePoint Settings and Types for backup and restore
- Supported Sites and List templates for backup and restore
- Supported SharePoint permission objects for backup and restore
- Configuring capture scope for SharePoint connectors
- End-user SharePoint data access in Cohesity Alta SaaS Protection
- Run the Delete and Stubbing policies to the SharePoint Online environment
- Limitations of SharePoint connector
- Protect Teams sites
- Protect OneDrive data
- Protect Teams chats
- Protect GoogleDrive data
- Protect Gmail data
- Protect Audit logs
- Protect Salesforce data and metada
- Protect Entra ID objects
- Protect Box data
- Protect Slack data
- Protect Email/Message data
- Configure Retention policies
- Perform backups
- View and share backed-up data
- Analytics
- About analytics
- Gain insights into storage utilization
- Gain insights into storage utilization for Entra ID and Salesforce connectors
- Gain insights into blocked activities, most active users, and more
- Gain insights into data volume (size and item count) on legal hold
- Gain insights into data volume (size and item count) saved in different Enhanced cases
- Gain insights into data volume (size and count) under different policies
- Gain insights into data volume (size and item count) under different Tags
- Gain insights into data volume (size and item count) under different Tags behaviors
- Gain insights into storage savings after deduplication and compression
- Gain insights into data ingestion trends
- Perform restores using Administration portal
- About restore
- Prerequisites for restore
- Restore Exchange Online mailboxes
- Restore SharePoint/OneDrive/Teams Sites and data
- Restore Teams chat messages and Teams channel conversations
- Restore O365 audit logs
- Restore Box data
- Restore Google Drive data
- Restore Gmail data
- About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
- Guidelines for Schema changes in Salesforce organization to prevent restore failures
- Restore Standard and Custom objects (Structured data restore)
- Custom Object restore - post processing steps
- Restore specific Records (Structured data) using Query filters
- Restore Salesforce CRM Content (Unstructured data restore)
- Restore Salesforce files/documents in Public/Shared libraries (Unstructured data restore)
- Limitations of Salesforce Data restore
- Salesforce Objects not supported for restore
- Key considerations for Salesforce Metadata restore
- Restore Salesforce Metadata
- Limitations of Salesforce Metadata backup and restore
- About Entra ID (Azure AD) objects and records restore
- Restore Slack data
- Restore data to File server
- Set default restore point
- Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
- Configure email addresses for notifications
- Downloading an item
- Restore dashboard
- Install services and utilities
- About services and utilities
- Pre-requisites to download and install services and utilities
- Downloading services and utilities
- Where to install the services and utilities
- Installing or upgrading services and utilities
- Configuring service accounts for services and utilities
- About the Apps Consent Grant Utility
- Discovery
- Configure Tagging polices
- Configure Tiering policy
- Auditing
- Manage Stors (Storages)
Features of Cohesity Alta SaaS Protection
Cohesity Alta SaaS Protection includes the following features:
Uses a single-tenant environment that provides isolated and dedicated cloud resources. It ensures data privacy and offers flexibility to scale the resources to meet specific performance requirements.
Provides enterprise-grade security through modern authentication, end-to-end encryption, activity auditing, PII detection, and data loss prevention.
This feature enables dynamic scaling of Cohesity Alta SaaS Protection infrastructure resources. As tenant load and data growth from customer workloads increase, the system automatically adjusts resources to ensure optimal performance and scalability.
Cohesity Alta SaaS Protection has the Extra Data Backup (EDB) feature, enabling customers to create an additional, air-gapped copy of their backup data for enhanced redundancy and disaster recovery. This secondary backup is stored in a geographically separated location, ensuring maximum data protection and isolation. Extra Data Backup is a paid service, with costs based on the front-end terabytes (FETB) of data copied.
The Compliance EDB feature provides the capability to recover your data from EDB (currently, EDB compliance is supported only for S3 on-premises EDB), ensuring data redundancy outside the hosted cloud environment. This feature ensures compliance by enabling secure data storage and retrieval options, giving users control and flexibility over their data management.
An additional authentication that provides Single Sign-On functionality by leveraging Microsoft Entra ID for authentication, and includes built-in Role-Based Authorization Controls (RBAC). You can integrate Azure policies to support conditional access, multifactor authentication, and other requirements.
Supports enterprise-scale, which enables the movement of a large amount of data per day. It manages storage containing a large number of objects.
A user can access the End-User portal using a supported web browser with appropriate licenses. It allows users to independently browse, search, share, and download data. Permissions from respective SaaS applications are synchronized, ensuring that you can only see data to which you have access in the application.
Supports data management and administration. The portal includes user management, backup configuration, monitoring, administrative restores, policy-based retention and deletion, eDiscovery, and compliance controls.
Supports PII and Tagging that integrate with policy-based controls.
Supports a disaster recovery mechanism using data replication to secondary systems such as Azure regions, Amazon S3, and on-premises compliance copies.
Supports a multi-regional deployment topology with globally centralized user management to meet in-country data requirements or provide optimal latency.
Offers cost-effective storage tiering options to meet different use cases.
Analytics enables you to have insights into the size and volume of data being backed up for your tenant.