Prerequisites for Azure service principal configuration
You must have permissions to set up and use service principal to authenticate. For more information, see Azure documentation:
When you create a service principal, you need to give it a role which allows it to perform the required API calls in NetBackup. You must create a custom role definition using the following permissions Actions permissions:
"Microsoft.Storage/storageAccounts/blobServices/containers/delete" "Microsoft.Storage/storageAccounts/blobServices/containers/read" "Microsoft.Storage/storageAccounts/blobServices/containers/write" "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action" "Microsoft.Storage/storageAccounts/blobServices/read" "Microsoft.Storage/storageAccounts/read"
Following are the required Data actions permissions:
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/deleteBlobVersion/action" "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action"
Create the following and keep the information handy, before starting with the configuration:
Storage Account
Client ID
Tenant ID
Secret Key