Adding a Cloud Account for Azure Data Lake Storage Gen2

You can add a cloud account for backing up and restoring Azure Blob Storage.

Before You Begin

If you do not have a registered Azure app, configure access to Azure resources.

Procedure

1. To create a cloud account, click +.

   The Add cloud account dialog box appears.

2. In the Name box, enter a name for the cloud account.

3. In the Subscription ID box, enter the subscription ID.

   To connect using a managed identity, you can assign a Contributor role or a custom role to the subscription.

4. To enter a credential, do one of the following:

   • From the Credential list, select an Azure IAM application credential for the account.

   • Click + to create a new Azure IAM application credential and enter or select the following information:

     1. From the Credential Vault list, select the credential vault where you want to store the new credential.

     2. In the Credential name box, enter a name for the credential.

     3. In the Tenant ID box, enter the tenant ID.

     4. In the Application ID box, enter the application ID.

     5. In the Application secret box, enter the application secret.

     6. From the Environment list, select the environment.

     7. To display or modify the endpoints, move the Show endpoints toggle to the right.

        The endpoint includes the DNS name or the IP address, a colon, and the port number.

     8. Click Save.

5. Click Save.

6. To define a custom role, do the following:

   1. Log on to the public Azure portal with service administrator credentials.

   2. Use CommvaultCloudAzureDBBackupRole.json and assign it to back up Azure databases.

      For more information about creating a custom role, go to Custom roles for Azure resources on the Microsoft Azure documentation website.

   3. On the Access Control (IAM) tab, click Add, and then select Add role assignment.

      The Add role assignment pane appears.

   4. Specify the following:

      1. From the Role list, select the custom role that you created.

      2. From the Assign access to list, select User, group, or service principal.

      3. In the Select box, enter the application name, and then select the application.

   5. Click Save.