Configure inSync to protect SharePoint Online

Last updated
Save as PDF
Share
1. Share

License editions: To understand the applicable license editions, see Plans & Pricing.

This topic provides information about configuring Druva inSync to protect SharePoint Online data.

Before you begin

Before you initiate inSync configuration to protect SharePoint Online data, ensure that you have the following accounts created.

Microsoft 365 global administrator account with a valid Microsoft 365 license.

Configure inSync to protect SharePoint Online

Log into inSync Management Console as a inSync Cloud administrator and perform the following steps to set-up inSync to protect SharePoint Online.

Step 1: Provide inSync permissions to access SharePoint Online data

To begin with SharePoint Online data backup, you need to authorize inSync with SharePoint Online app data access. For procedure with screenshots, see Configure Druva inSync for Microsoft 365.

Once you initiate app configuration from the inSync Management Console, the application redirects you to the Microsoft 365 login page. Log in as a Global Administrator to review the requested app permissions and grant access to the app data. To know more about the requested permissions and their purpose, check the Microsoft 365 App Permissions for Druva App article.

inSync communicates with Microsoft 365 services using OAuth 2.0, an open protocol for token-based authentication and authorization. For more information, see the OAuth website.

Support for Azure Active Directory (AD) Conditional Access policies

If your organization uses Azure AD Conditional Access policies for authenticating and providing conditional access to users, the app configuration step will adhere to these policies. For more information, see Support for Azure Active_Directory (AD) Conditional Access policies.

After you complete the configuration of inSync with Microsoft 365 app, you can use the Verify Configuration option to check if inSync can access your users. For information about verifying configuration, see Configure Druva inSync for Microsoft 365.

Step 2: Get data encryption key (ekey)

To ensure that the Microsoft 365 data that is backed up is secure, you must configure inSync to get the data encryption key (ekey). For information about configuring inSync to get the data encryption key, see Configure Druva inSync for Microsoft 365.

Step 3: Configure SharePoint for backup and restore

The settings that you define automatically apply to all subsequent auto-discovered sites. You can also change the settings of any auto-discovered site.

You can configure SharePoint sites for backup and restore in the following ways:

Auto Configuration
Custom configuration

Auto Configuration of SharePoint sites

Sign in to Druva Cloud Platform Console and navigate to Microsoft 365 > SharePoint.
A page that lists all the discovered sites appears. The status of all the discovered sites by default is set as Not Configured.

Note: To search the sites by Title or URL, enter the required information in the search box and press Enter.

Click Auto Configuration. Enter the following details in the Auto Configuration wizard and click Save.

Field	Description
Auto Discover sites for Backup	Select this checkbox if you want inSync to automatically discover new site collections added to the SharePoint Online setup of your organization. inSync runs the discovery process every 24 hours. This setting is enabled by default.
Auto Assign Storage	Select this checkbox if you want inSync to automatically assign storage for any newly discovered site collection. It is mandatory for a site collection to be assigned storage for inSync to back it up. To view the existing mappings, click View Mappings. Note: The View Mappings and Create Mappings option is displayed only for Multi-Geo tenants.
Select Storage	Displays all the configured storage regions. Select storage from the list. Storage once assigned cannot be changed later.
Backup Frequency	Select the frequency of backups for SharePoint sites. By default, it is once a day. You can set the frequency as per your need. For more information, see Define backup interval for SaaS Apps. For the Business license edition for Microsoft 365, by default, the backup frequency is Once a Day. Use the dropdown to select the backup frequency as Thrice a Week, Twice a Week, or Once a Week.
Retain daily data backups for	Type the number of days that you want to retain all backups. At the end of the backup period, inSync will delete the data from the storage. For example, if you specify that you want to retain all backups for 5 days and inSync completed the backup operation on January 6, 2017, inSync will delete the backup data from the storage on January 11, 2017.
Retain weekly data backups for	Type the number of weeks that you want to retain all backups. At the end of the weekly backup period, inSync deletes the data from the storage. Note: The weekly backup is the last backup in a calendar week. The calendar week starts on Sunday.
Retain monthly data backups for	Type the number of months that you want to retain all backups. At the end of the monthly backup period, inSync deletes the data from the storage. Note: The monthly backup is the last backup in a calendar month.
File Types and Extensions	In the Exclude Files box, type the file types that you want to exclude from the backup of a SharePoint site collection. The file extensions are automatically added to the adjacent field. If you want to remove a file type, click the file type.
Teams Meeting Recordings	The backups will exclude all files from the default folder path of Teams Meeting Recordings (TMR) by default. This setting applies to Teams sites only. The default folder path is /Channel name/Documents/Recordings. If you want to back up TMR files, enable this setting. The first backup after disabling the exclusion setting will be a full scan backup. To avoid a full scan backup of all configured sites, disable the exclusion setting only for those sites where you have a requirement to back up TMR files. For more information, see Exclusion of Teams Meeting Recordings from backups.

Note: To retain the backups for an unlimited period, enter 0 as the value for all daily, weekly and, monthly retention settings.

Custom configuration of SharePoint sites for backup

Sign in to Druva Cloud Platform Console and navigate to Microsoft 365 > SharePoint.
A page that lists all the discovered sites appears. The status of all the discovered sites by default is set as Not Configured.

5. Click the site collection that you want to configure for backup and restore. The Configure Site Backup page appears.

6. If you choose to use the Use Default option, review the details and click Save. If you have selected the Custom option, enter the following details and click Save.

Field	Description
URL	Displays the site URL details.
Title	Displays the name of the site collection. Note: If the SharePoint Online sites, subsites, lists, and document libraries have a '/' (forward slash) character present in their title, the “/” is replaced with an “_” (underscore) character before backing up the data.
Assign Storage	Select storage from the drop-down list. Storage once assigned cannot be changed later.
Druva Storage (For Microsoft 365 Multi-Geo tenants only)	If Druva Storage is already assigned and mapped to the geo location to which the SharePoint site belongs, storage is automatically assigned to the site when you click on Save. Use the View Mappings option to view the existing storage mappings. If Druva Storage is not assigned and mapped to the geo location to which the SharePoint site belongs, an error is displayed. You must create Multi-Geo Storage Mappings. For more information, see Multi-Geo support for SharePoint Online and Teams.
Settings	Displays the backup and retention policy settings that you want to apply to this site collection. The following options are available: Use Default (Default) - Select this option if you want to apply the defined global SharePoint settings for this site collection. The settings are displayed and are non-editable. Custom - Select this option if you want to define custom settings for this site collection. This enables you to define a custom backup schedule, data retention policy, and file exclusions for this site collection.
Backup frequency	Select the frequency of backups for SharePoint sites. For scheduled backups, at least one AD Connector should be registered and connected to inSync Cloud. For more information see Prerequisites to back up SaaS Apps data. For the Business license edition for Microsoft 365, by default, the backup frequency is Once a Day. Use the dropdown to select the backup frequency as Thrice a Week, Twice a Week, or Once a Week.
Retain daily data backups for	Type the number of days that you want to retain all backups. At the end of the backup period, inSync will delete the data from the storage. For example, if you specify that you want to retain all backups for 5 days and inSync completed the backup operation on January 6, 2017, inSync will delete the backup data from the storage on January 11, 2017.
Retain weekly data backups for	Type the number of weeks that you want to retain all backups. At the end of the weekly backup period, inSync deletes the data from the storage. Note: The weekly backup is the last backup in a calendar week. The calendar week starts on Sunday.
Retain monthly data backups for	Type the number of months that you want to retain all backups. At the end of the monthly backup period, inSync deletes the data from the storage. Note: The monthly backup is the last backup in a calendar month.
File Types and Extensions	In the Exclude Files box, type the file types that you want to exclude from the backup of a SharePoint site collection. The file extensions are automatically added to the adjacent field. If you want to remove a file type, click the file type.
Teams Meeting Recordings	The backups will exclude all files from the default folder path of Teams Meeting Recordings (TMR) by default. This setting applies to Teams sites only. The default folder path is /Channel name/Documents/Recordings. If you want to back up TMR files, enable this setting. The first backup after disabling the exclusion setting will be a full scan backup. To avoid a full scan backup of all configured sites, disable the exclusion setting only for those sites where you have a requirement to back up TMR files. For more information, see Exclusion of Teams Meeting Recordings from backups.
Relative URL Paths	This option is displayed only if you have selected Custom settings for backup and retention. In the Relative URL Paths box, specify the relative URL path of a subsite, Document Library, or List separated by a semicolon to exclude the specified paths from SharePoint backup.
Data Lock	Note: Only Cloud Administrators can enable the Data Lock feature. Enables the Data Lock feature. For more information, see Data Lock. To enable the Data Lock feature, select the Enable Data Lock checkbox and on the confirmation window, click Yes. On the summary page, the Data Lock status is displayed as enabled. These details will be captured in the Admin Audit Trail for auditing purposes. Note: Once you enable the Data Lock feature, you cannot: Delete the snapshots. Edit the retention period. Disable the Data Lock setting. Go back to default settings.

Relative URL Paths

Use the Relative URL Paths option within inSync Management Console to exclude any specific subsites, Document Libraries, List or Folder nested under a subsite from getting backed up and thus reduce the time required for SharePoint sites data backup.

SharePoint has a unique URL for each subsite, Document Library, and List. You can copy the Relative URL Path from the complete URL.
Each URL of the site content has a common part within the link as mentioned in the example below. Relative URL Path is what remains when you remove the common part from the URL.

URL starts with root site URL: For example, https://contoso.sharepoint.com/sites/DruvaUniversity/
URL ends with /Forms/AllItems.aspx or AllItems.aspx

Note:

For List , the relative URL path contains the List string.

URL has %20 string to represent the ' ' one space character. You can directly copy-paste the relative URL from the browser with %20 in it. Alternatively, you can manually provide the relative URL without %20. For example, InSync%20Course%20Documents or InSync Course Documents

Examples of Relative URL Paths for different site contents:

Site Content Type	Title displayed on SharePoint	Complete URL	Relative URL
Root Site	Druva University	https://contoso.sharepoint.com/sites/DruvaUniversity	Not Applicable
Document Library at root site level	inSync Course Documents	https://contoso.sharepoint.com/sites.../AllItems.aspx	InSync%20Course%20Documents OR InSync Course Documents
List at root site level	inSync PM List	https://contoso.sharepoint.com/sites.../AllItems.aspx	Lists/InSync%20PM%20List OR Lists/InSync PM List
Subsite	InSync Phoenix Subsite	https://contoso.sharepoint.com/sites...enixAppSubsite	inSyncPhoenixAppSubsite
Document Library at Subsite	SaaS Apps Product Documents	https://contoso.sharepoint.com/sites.../AllItems.aspx	inSyncCloudAppSubsite/CloudApp%20Product%20Documents OR inSyncCloudAppSubsite/CloudApp Product Documents
List at Subsite	Cloud App Developer List	https://contoso.sharepoint.com/sites.../AllItems.aspx	inSyncCloudAppSubsite/Lists/CloudApp%20Developer%20LIst OR inSyncCloudAppSubsite/Lists/CloudApp Developer LIst
Subsite at the Subsite level	Salesforce Subsite	https://contoso.sharepoint.com/sites...orce%20Subsite	inSyncCloudAppSubsite/Sales%20Force%20Subsite OR inSyncCloudAppSubsite/Sales Force Subsite

Support for Azure Active Directory (AD) Conditional Access policies