Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. MSDP cloud support
  4. About Azure service principal support
  5. Prerequisites for Azure service principal configuration
NetBackup™ Deduplication Guide

Prerequisites for Azure service principal configuration

  • You must have permissions to set up and use service principal to authenticate. For more information, see Azure documentation:

    https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

  • When you create a service principal, you need to give it a role which allows it to perform the required API calls in NetBackup. You must create a custom role definition using the following permissions Actions permissions:

    "Microsoft.Storage/storageAccounts/blobServices/containers/delete"
    "Microsoft.Storage/storageAccounts/blobServices/containers/read"
    "Microsoft.Storage/storageAccounts/blobServices/containers/write"
    "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
    "Microsoft.Storage/storageAccounts/blobServices/read"
    "Microsoft.Storage/storageAccounts/read"

    Following are the required Data actions permissions:

    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/deleteBlobVersion/action"
    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action"
  • Create the following and keep the information handy, before starting with the configuration:

    • Storage Account

    • Client ID

    • Tenant ID

    • Secret Key

Feedback

Was this page helpful?
Previous

About Azure service principal support

Next

Configure Azure service principal

Feedback

Was this page helpful?