| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| admin | Add Domain | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/setup/add-domain.md | Check out this video and others on our [YouTube channel](https://go.microsoft.co Your company might need multiple domain names for different purposes. For example, you might want to add a different spelling of your company name because customers are already using it and their communications have failed to reach you. +> [!TIP] +> Where possible, we recommend that your organization use a custom domain name, as it can enhance your email's appearance and improve it's reputation. + 1. In the Microsoft 365 admin center, choose <a href="https://go.microsoft.com/fwlink/p/?linkid=2171997" target="_blank">**Setup**</a>. 1. Under **Get your custom domain set up**, select **View** > **Manage** > **Add domain**. 1. Enter the new domain name that you want to add, and then select **Next**. |
| backup | Backup Billing | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-billing.md | Title: Set up pay-as-you-go billing for Microsoft 365 Backup (Preview) + Title: Manage billing and invoices for Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 search.appverid: - essentials-get-started ms.localizationpriority: medium-description: Learn how to set up pay-as-you-go billing for Microsoft 365 Backup. +description: Learn how to set up and manage pay-as-you-go billing and invoices for Microsoft 365 Backup. -# Set up pay-as-you-go billing for Microsoft 365 Backup (Preview) +# Manage billing and invoices for Microsoft 365 Backup -As a first step to start using Microsoft 365 Backup, you should link an Azure subscription in Syntex pay-as-you-go, if you haven't already done so. Although Microsoft 365 Backup isn't part of the Microsoft Syntex product suite, this offering is still using the Syntex billing setup for consistency with other Microsoft 365 pay-as-you-go offerings. +As a first step to start using Microsoft 365 Backup, you should link an Azure subscription in Microsoft Syntex pay-as-you-go, if you haven't already done so. Although Microsoft 365 Backup isn't part of the Microsoft Syntex product suite, this offering is still using the Syntex billing setup for consistency with other Microsoft 365 pay-as-you-go offerings. -## Set up billing +## Set up pay-as-you-go billing Use these steps to set up pay-as-you-go billing for Microsoft 365 Backup. To view tags: - **servicetype** is OneDrive, SharePoint, or Exchange. - - **applications** is coming soon. + - **applications** shows a list of app IDs. - Azure cost analysis - filter by tag. |
| backup | Backup Faq | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-faq.md | Title: Frequently asked questions about Microsoft 365 Backup (Preview) + Title: Frequently asked questions about Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Read frequently asked questions about Microsoft 365 Backup. -# Frequently asked questions about Microsoft 365 Backup (Preview) +# Frequently asked questions about Microsoft 365 Backup -> [!NOTE] -> This feature is currently in preview and subject to change. #### Has Microsoft's stance on shared responsibility of data protection changed? -No, we still have the same point of view, but are now offering additional tools to help organizations achieve those goals and responsibilities. +No, we still have the same point of view, but are now offering more tools to help organizations achieve those goals and responsibilities. #### Why donΓÇÖt Disaster Recovery copies suffice for my backup? -Disaster Recovery (DR) is the ability to recover from a situation in which the primary data center is unable to continue to operate. A DR copy with Microsoft 365 maintains the current state of content, not any historical versions from prior points in time. Microsoft 365 Backup provides additional benefit by giving you a way to restore data back to a healthy state in the past with fast RTO to with short RPO intervals. +Disaster Recovery (DR) is the ability to recover from a situation in which the primary data center is unable to continue to operate. A DR copy with Microsoft 365 maintains the current state of content, not any historical versions from prior points in time. Microsoft 365 Backup offers the added advantage of allowing you to restore data to a previous healthy state quickly, with fast RTO (recovery time objectives) and short RPO (recovery point objectives). #### Why donΓÇÖt versions already solve this point in time restore problem? -Versions give individual users a way to restore files or sites to prior points in time, but that kind of recovery method doesn't scale well for mass ransomware attacks where an admin needs to orchestrate the recovery. Versions might also be exhausted depending on the version limit set by the admin. +Versions give individual users a way to restore files or sites to prior points in time, However, that kind of recovery method doesn't scale well for large-scale ransomware attacks where an admin needs to orchestrate the recovery. Versions might also be exhausted depending on the version limit set by the admin. #### Why donΓÇÖt legal holds solve the problem of keeping all versions of items for recovery? Legal holds retain data, but that feature is optimized for export (for example, via eDiscovery), not for mass restore. Microsoft 365 Backup gives the right enhanced restore tooling for ransomware and accidental/malicious deletions at scale, plus optimized performance for those scenarios. -#### What mailbox changes are ΓÇ£backed upΓÇ¥? +#### What mailbox changes are "backed up"? -Mailbox backup enables the recovery of copies of mailbox item ΓÇ£versions.ΓÇ¥ Versions are created by two types of actions: +Mailbox backup enables the recovery of copies of mailbox item "versions." Two types of actions create versions: - Modifications - Deletions Mailbox backup enables the recovery of copies of mailbox item ΓÇ£versions.ΓÇ¥ Ve Example events that are versions and recoverable via backup: **User action**-- Edit a received email using ΓÇÿedit messageΓÇÖ via OL+- Edit a received email using ΓÇÿedit messageΓÇÖ via Outlook - Edit a Note (not draft) - Remove an attachment from an email - Edit an attachment to an email Example events that aren't versioned or recoverable via backup: #### What is the service recovery point objective? -The recovery point objective (RPO) is the maximum amount of time between the most recent backup and a data destruction event. Stated another way, itΓÇÖs the amount data lost due to a data destruction event not recoverable via the backups. In the case of Microsoft 365 Backup, the RPOs are: +The recovery point objective (RPO) is the maximum amount of time between the most recent backup and a data destruction event. Stated another way, itΓÇÖs the amount data lost due to a data destruction event not recoverable via the backups. For Microsoft 365 Backup, the RPOs are: -For OneDrive and SharePoint, the RPO for the first two weeks is 15 minutes, then one week beyond that. This means for the first two weeks, the most amount of data that can be lost due to a data destruction event is roughly 10 minuteΓÇÖs worth of the most recent data. Likewise, after two weeks, the most amount of data that can be lost is a weekΓÇÖs worth of data. +- For OneDrive and SharePoint, the RPO for the first two weeks is 10 minutes, then one week beyond that. This means for the first two weeks, the most amount of data that can be lost due to a data destruction event is roughly 10 minuteΓÇÖs worth of the most recent data. Likewise, after two weeks, the most amount of data that can be lost is a weekΓÇÖs worth of data. -For Exchange Online, the RPO is 10 minutes, meaning the most amount of data that can be lost due to a data destruction event is roughly 10 minutesΓÇÖs worth of data. +- For Exchange Online, the RPO is 10 minutes, meaning the most amount of data that can be lost due to a data destruction event is roughly 10 minutesΓÇÖs worth of data. Let's start with what it doesn't mean: We are *not* taking snapshots every 10 minutes. -Backup frequency of 10 minutes (if the item is modified) means that changes to the item will be saved as a version once every 10 minutes, no matter how many changes are made in that 10-minute interval. For example, if a ransomware attack encrypts the email item every minute, will we take six copies in an hour. -<! -Let's start with what it doesn't mean: We are *not* taking snapshots every 10 seconds. +A backup frequency of 10 minutes (if the item is modified) means that any changes made to the item will be saved as a new version every 10 minutes, regardless of how many changes occur within that 10-minute period. For example, if a ransomware attack encrypts the email item every minute, we'll take six copies in an hour. ++#### What happens when user content is backed up but then is removed or deleted from Microsoft Entra ID (formerly Azure Active Directory)? ++When a user is removed from the backup policy, the backup of the OneDrive account or Exchange mailbox is retained for one year from the date the backup was created. -Backup frequency of 10 seconds (if the item is modified) means that changes to the item will be saved as a version once every 10 seconds, no matter how many changes are made in that 10-second interval. For example, if a ransomware attack encrypts the email item every second, will we take six copies in a minute. +When a user is deleted from Microsoft Entra ID, the backup of the OneDrive account or Exchange mailbox is retained for one year from the date the backup was created. ++When a site is removed from the backup policy, the backup of the SharePoint site will be held for 52 weeks from the time a given restore point was created for that site. ++#### How can I restore the OneDrive account or Exchange mailbox for a user who is deleted from Microsoft Entra ID (formerly Azure Active Directory)? ++> [!NOTE] +> Deleted users will appear as "ΓÇô" in the user interface because the user does not exist in the tenancy. However, the backups and associated restore points will be retained for the full 365-day retention period from when a given restore point was originally created. ++If the user has been deleted within the past 30 days, the best option is to restore the user based on instructions found at [Restore a user in the Microsoft 365 admin center](/microsoft-365/admin/add-users/restore-user). Once the user is reconstituted, the name will reappear in the Backup tool restore experience, and the rest of the experience will work as normal. ++For OneDrive, you can restore the OneDrive to the original URL or a new URL. At that time, the OneDrive is in an "orphaned" state. To connect the OneDrive to a user, see [Fix site user ID mismatch in SharePoint or OneDrive](/sharepoint/troubleshoot/sharing-and-permissions/fix-site-user-id-mismatch). ++For Exchange, if the user account is currently or permanently deleted, Microsoft 365 Backup retains the inactive mailbox for the duration of the backup policy. To recover and restore the inactive mailbox, see the following guidance: ++- [Recover an inactive mailbox](/purview/recover-an-inactive-mailbox) +- [Restore an inactive mailbox](/purview/restore-an-inactive-mailbox) ++Once an inactive mailbox is recovered and restored to a new mailbox, the new mailbox must be added to the backup policy if desired. ++<! +- For Exchange, a user account will be in a soft-deleted state for 30 days after it's deleted. To restore the user, see [Restore a user in the Microsoft 365 admin center](/microsoft-365/admin/add-users/restore-user). Once you restore the user, you can use the restore feature in Microsoft 365 Backup to restore as usual. > |
| backup | Backup Offboarding | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-offboarding.md | Title: Offboarding in Microsoft 365 Backup (Preview) + Title: Offboarding in Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Learn about how to offboard usage in Microsoft 365 Backup. -# Offboarding in Microsoft 365 Backup (Preview) +# Offboarding in Microsoft 365 Backup -> [!NOTE] -> This feature is currently in preview and subject to change. --To no longer use the Microsoft 365 Backup tool, you must offboard usage. This action includes pausing and deleting all active policies and deleting all of the backed-up data. During the preview, there are three ways that offboarding is initiated: +To no longer use the Microsoft 365 Backup tool, you must offboard usage. This action includes pausing and deleting all active policies and deleting all of the backed-up data. There are two ways that offboarding is initiated: - Disable the tool in the pay-as-you-go billing setup panel where you first enabled the tool. -- Call into support to ask Microsoft to offboard you from the tool. If youΓÇÖd like offboarding to happen faster than default (with a minimum of 30 days), you can do this via the support call.- - If your billing account goes into an unhealthy state. ## Offboarding recovery undo period Retention and deletion policies don't ΓÇ£flow throughΓÇ¥ to the backups. This me ### Sensitivity labels -Restoration of any data (such as sites or mailbox items) reverts the sensitivity labels of the data to the state of that protected item at the prior point in time from which it's being restored (that is, the state of labeling at the point in time from which the content is being restored; in other words, the state reverts to the prior point in time). +Restoration of any data (such as sites or mailbox items) reverts the data's sensitivity labels to the state of that protected item at the prior point from which it's being restored. That is, the state of labeling at the point in time from which the content is being restored; in other words, the state reverts to the prior point in time. +<! ## Backup data deletion and undo grace periods -If you need to delete data from the backups during the preview period, you must offboard from the offering entirely and delete all backups. In the future, we'll enable more granular restore point deletion capabilities. +If you need to delete data from the backups, you must offboard from the offering entirely and delete all backups. In the future, we'll enable more granular restore point deletion capabilities. Any offboarding or backup deletion activities trigger a 29-day grace period where we'll hold the backup data. If you re-enable the tool, the backups are present in the tool again. ΓÇâ+> |
| backup | Backup Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-overview.md | Title: Overview of Microsoft 365 Backup (Preview) + Title: Overview of Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 search.appverid: - essentials-overview ms.localizationpriority: medium-description: Learn about the backup and recovery capabilities for SharePoint, Exchange Online, and OneDrive for Business using Microsoft 365 Backup. +description: Learn about the backup and recovery capabilities for OneDrive, SharePoint, and Exchange Online using Microsoft 365 Backup. -# Overview of Microsoft 365 Backup (Preview) +# Overview of Microsoft 365 Backup -> [!NOTE] -> Microsoft 365 Backup (Preview) is now available worldwide in all commercial cloud environments. General availability is expected to be mid-2024. This preview feature is subject to change and [limitations as defined](backup-limitations.md). Before you begin, read the [Microsoft 365 Backup preview terms and conditions](backup-preview-terms.md). +Microsoft 365 Backup is designed to ensure your organizationΓÇÖs data is always protected and easily recoverable. With the ability to back up all or select SharePoint sites, OneDrive accounts, and Exchange mailboxes, Microsoft 365 Backup provides comprehensive coverage for your critical data. +<! +Key features include: -## About the preview +- **Granular and massive scale restorations**: Restore files, sites, and mailbox items to a prior point in time, whether you need to recover a single document or an entire site. -Microsoft 365 Backup is currently in preview and begins rolling out to organizations in mid-2024. You can set up billing for the product as described in [Set up Microsoft 365 Backup](backup-setup.md). Once Microsoft 365 Backup has been deployed and is available for use in your tenant, you'll see it in the Microsoft 365 admin center page under **Settings**. +- **Seamless integration**: Managed directly from the Microsoft 365 admin center, making it easy to set up and manage your backup policies. -During the preview period, performance and speed of web interfaces, initial configuration, and restores might be slower than expected as we scale up our infrastructure to remove undesirable latency from our system. --## Microsoft and partner offerings --This documentation outlines the Microsoft 365 Backup offering available in the Microsoft 365 admin center. We're partnering with many independent software vendors (ISVs) to provide differentiated versions of their applications integrated with the Microsoft 365 Backup Storage platformΓÇöall providing the same underlying performance value proposition for your Microsoft 365 data. --In the case of a partner application, operation of the Microsoft 365 Backup tool will be managed and paid for entirely through the partner's application. Those applications will have the ability to provide a single pane of glass for all of your data estates that require backups, and they might provide additional enhanced experiences or workflows. +- **Business continuity**: Ensures quick recovery from ransomware attacks, accidental deletions, or other data loss events, minimizing downtime and maintaining business operations. +- **Partner ecosystem**: Leverage additional features and workflows through integrated partner applications to manage all your backups in one place. +> ## Scenarios and value proposition Business continuity assurance is a top-of-mind concern for many companies. Microsoft 365 Backup delivers business continuity peace of mind by providing performance and reliable restore confidence. When evaluating a backup and restore offering, what really matters isn't solely the backup, but the ability to restore your data to a healthy state quickly when you need to do so. Recovering large volumes of content is difficult when copying data at a scale from a remote, air-gapped location requiring weeks or even months to get your business back up and running. In cases of a ransomware attack that encrypts large swaths of your data, or inst To summarize, applications built on top of the Microsoft 365 Backup Storage platform deliver the following benefits regardless of the size or scale of the protected tenant: -- Fast backup within hours+- Fast backup within hours. -- Fast restore within hours (see [performance targets](#general-availability-performance-targets) later in this article)+- Fast restore within hours (see [performance expectations](#performance-expectations) later in this article). -- Full SharePoint site and OneDrive account restore fidelity, meaning the site and OneDrive are restored to their exact state at specific prior points in time via a rollback operation+- Full SharePoint site and OneDrive account restore fidelity, meaning the site and OneDrive are restored to their exact state (excluding, for example, taxonomy mastered outside the site scope) at specific prior points in time via a rollback operation. -- In the future, roll forward granular file-level restores in OneDrive and SharePoint+- Full Exchange mailbox item restores or granular item restores using search, for modified or deleted items. -- Full Exchange mailbox item restores or granular item restores using search+- Consolidated security and compliance domain management. -- Consolidated security and compliance domain management+## Feature summary -<!M365-Backup_VID_WEB_Final.mp4 <need a link that embeds properly into the learn docs>ΓÇâ> +|Feature |OneDrive |SharePoint |Exchange Online | +||||| +|**Retention period** | 1 year | 1 year | 1 year | +|**Recovery points** |10 minutes for two weeks prior<br><br>Weekly snapshots 2-52 weeks prior |10 minutes for two weeks prior<br><br>Weekly snapshots 2-52 weeks prior | 10 minutes for prior 52 weeks | +|**Backup granularity** | OneDrive account |SharePoint site |Exchange user account | +|**Restore granularity** |OneDrive accounts<br><br>Files restorable via versions (coming soon) |SharePoint sites<br><br>Files restorable via versions (coming soon) |Mail/Contacts/Calendar/Task items | +|**Restore options** |**Location**: Same or new URL<br><br>**OneDrive** restore rolls back to the state of the site at the prior point in time, overwriting all content and metadata since that prior point in time<br><br>**File version** restore rolls forward the file to the state at the prior point in time, but retains prior versions |**Location**: Same or new URL<br><br>**Full site** restore rolls back to the state of the site at the prior point in time, overwriting all content and metadata since that prior point in time<br><br>**File version** restore rolls forward the file to the state at the prior point in time, but retains prior versions |**Location**: Same or new folder within userΓÇÖs mailbox<br><br>**Full and item level mailbox** restores only modified/deleted items from prior point in time | +|**Restore speeds (RTO)** |Up to 1,000 average-sized OneDrive accounts at a rate of up to 1-3 TB per hour |Up to 1,000 average-sized sites, at a rate of up to 1-3 TB per hour |Up to 1,000 average-sized mailboxes at a rate of up to 1-3 TB per hour | +|**Auditability** |Actions fully auditable |Actions fully auditable |Actions fully auditable | +|**Geographic residency** |Physically redundant & geographically replicated<br><br>Honors tenantΓÇÖs geographic residency requirements |Physically redundant & geographically replicated<br><br>Honors tenantΓÇÖs geographic residency requirements |Physically redundant & geographically replicated<br><br>Honors tenantΓÇÖs geographic residency requirements | +|**Billing model** |$0.15 per GB per month for all data protected by Backup<br><br>Restores are free |$0.15 per GB per month for all data protected by Backup<br><br>Restores are free |$0.15 per GB per month for all data protected by Backup<br><br>Restores are free | ## Architectural overview and performance expectations To summarize, applications built on top of the Microsoft 365 Backup Storage plat Microsoft 365 Backup provides ultra-fast backup and restore capabilities by creating backups within the protected servicesΓÇÖ data boundaries. -Microsoft 365 Backup not only provides uniquely fast recovery from common business continuity and disaster recovery (BCDR) scenarios like ransomware or accidental/malicious employee content overwrite/deletion. Additional BCDR scenario protections are also built directly into the service. For example, OneDrive, SharePoint, and Exchange Online provide replicated copies of your data across geographically disparate datacenters to automatically protect against physical disasters and automatically failover to live active copies seamlessly without the need for end customer intervention. +Microsoft 365 Backup not only provides uniquely fast recovery from common business continuity and disaster recovery (BCDR) scenarios like ransomware or accidental/malicious employee content overwrite/deletion. More BCDR scenario protections are also built directly into the service. For example, OneDrive, SharePoint, and Exchange Online have a proprietary architecture design for resiliency with replicated copies of customer data to failover to live active copies seamlessly without the need for end customer intervention. -Our backups are protected from malicious overwrites because OneDrive, SharePoint, and Exchange use Append-Only storage. This means that SharePoint can only add new content blobs and can never change old ones until they're permanently deleted. The Exchange items are backed up in an immutable manner and can't be accessed by a client process (such as Outlook, OWA, or MFCMAPI). This process ensures that items can't be changed or corrupted after an initial save, protecting against attackers that try to corrupt old versions. For More information about the built-in service and data resiliency, see [SharePoint and OneDrive data resiliency in Microsoft 365](/compliance/assurance/assurance-sharepoint-onedrive-data-resiliency) and [Exchange Online data resiliency in Microsoft 365](/compliance/assurance/assurance-exchange-data-resiliency). +Our backups are protected from malicious overwrites because OneDrive, SharePoint, and Exchange use Append-Only backup storage. This means that SharePoint can only add new content blobs and can never change old ones until they're permanently deleted. The Exchange items are backed up in an immutable manner and can't be accessed by a client process (such as Outlook, OWA, or MFCMAPI). This process ensures that items can't be changed after an initial save, protecting against attackers that try to corrupt old versions. For more information about the built-in service and data resiliency, see [SharePoint and OneDrive data resiliency in Microsoft 365](/compliance/assurance/assurance-sharepoint-onedrive-data-resiliency) and [Exchange Online data resiliency in Microsoft 365](/compliance/assurance/assurance-exchange-data-resiliency). Key architectural takeaways: Key architectural takeaways: - The backups are immutable unless expressly deleted by the Backup tool admin via product offboarding. -- OneDrive, SharePoint, and Exchange have multiple physically redundant copies of your data to protect against physical disasters.+- OneDrive, SharePoint, and Exchange have multiple physically redundant copies of your data to mitigate the impact of physical disasters.  -### General availability performance targets --> [!IMPORTANT] -> During the preview period, performance and speed of web interfaces, initial configuration, and restores might be slower than expected as we scale up our infrastructure to remove undesirable latency from our system. The following performance targets are not guarantees during the preview and might change at general availability. +### Performance expectations #### Backup policy performance -Creating a new protection policy initiates the process of backing up selected SharePoint sites, OneDrive accounts, and Exchange mailboxes. Once you submit a request to activate a valid protection policy, it takes on average up to 60 minutes to process and another 60 minutes to create restore points. +Creating a new protection policy initiates the process of backing up selected SharePoint sites, OneDrive accounts, and Exchange mailboxes. Once you submit a request to activate a valid protection policy, it takes on average up to 60 minutes to process and another 60 minutes to create restore points. Initial backups take approximately 15 minutes per 1,000 protection units initially or incrementally added to a policy. -Restore points are physically created in the service as soon as the policy is confirmed to be activated in the tool, even if those restore points take some additional time to become visible in the restore tool. +Restore points are physically created in the service as soon as the policy is confirmed to be activated in the tool, even if those restore points take some more time to become visible in the restore tool. #### Restoration performance -Restoration performance dictates your recovery time objection, or the time it will take for you to restore a healthy state of your data and thus recover from a data destruction event. -For full OneDrive account and SharePoint site restores, the fastest recovery will happen when choosing in-place restore rather a new URL restore. Additionally, choosing one of the recommended ΓÇ£fasterΓÇ¥ restore points presented in the restore workflow UI will yield the quickest recovery results. +Restoration performance correlates with your recovery time objective, or the time it takes for you to restore a healthy state of your data and recover from a data destruction event. +For full OneDrive account and SharePoint site restores, the fastest recovery happens when choosing in-place restore rather a new URL restore. Additionally, choosing one of the recommended express restore points presented in the restore workflow user interface yields the quickest recovery results. -All restore points and restores to new URLs will be relatively fast, but same URL restores using a recommended ΓÇ£fasterΓÇ¥ restore point will typically yield better results. The Exchange Online restore workflow doesn't have or require the ΓÇ£fasterΓÇ¥ restore points. +All restore points and restores to new URLs are relatively fast, but same URL restores using a recommended express restore point will typically yield better results. The Exchange Online restore workflow doesn't have or require the "faster" restore points. -It will take on average less than one hour for the first full site or account protection unit to be restored when a new restore session is initiated. After the first site or account is restored in a session, the remaining protection units will complete in relatively fast succession. +The following table summarizes expected performance for a normally distributed tenant, including tenants of large size and scale. -The following table summarizes expected performance for a normally distributed tenant, including tenants of large size and scale. During the preview period, actual performance might deviate from these general availability targets. +|Protection units |OneDrive and SharePoint |Exchange Online | +|||| +|1 |30 minutes |2 hours | +|50 |3 hours |2.5 hours | +|250 |4 hours | 3 hours | +|1,000 |10 hours |4 hours | +|More than 1,000 |250/hour<br>Up to 3 TB/hour |250+/hour<br>Up to 2.7 TB/hour | +<sup>*Single protection unit OneDrive and SharePoint restores using express restore points can take on average between 10 minutes and 120 minutes.</sup> ++<! |Scenario |Restore of all protection units* complete | |:-|:--| | 1,000 accounts, sites, or mailboxes<br>(10-GB average size) |Less than 12 hours | <sup>*A *protection unit* is a OneDrive account, SharePoint site, or Exchange mailbox.</sup>+> +## Integrated partner solutions ++We partner with many independent software vendors (ISVs) to provide differentiated versions of their applications integrated with the Microsoft 365 Backup Storage platformΓÇöall providing the same underlying performance value proposition for your Microsoft 365 data. ++For a partner application, operation of the Microsoft 365 Backup tool will be managed and paid for entirely through the partner's application. Those applications have the ability to provide a single pane of glass for all of your data estates that require backups, and they might provide more enhanced experiences or workflows. ## General Data Protection Regulations (GDPR) |
| backup | Backup Pricing | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-pricing.md | Title: Pricing model for Microsoft 365 Backup (Preview) + Title: Pricing model for Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Learn about the charge model and pricing calculator for Microsoft 365 Backup. -# Pricing model for Microsoft 365 Backup (Preview) --> [!NOTE] -> This feature is currently in preview and subject to change. +# Pricing model for Microsoft 365 Backup ## Microsoft 365 Backup charge model -The Microsoft 365 Backup service, offered through the Microsoft 365 admin center, is a [pay-as-you-go consumption-based service](/microsoft-365/syntex/syntex-pay-as-you-go-services). The preview list price is $0.15/GB/month of protected content. +The Microsoft 365 Backup service, offered through the Microsoft 365 admin center, is a [pay-as-you-go consumption-based service](/microsoft-365/syntex/syntex-pay-as-you-go-services). The list price is $0.15/GB/month of protected content. ### WhatΓÇÖs counted towards protected backup storage? -Microsoft 365 Backup will charge you for content size of the following for 365 days from when it is added to backup protection: +Microsoft 365 Backup charges you based on the size of the following content for 365 days from the time it's added to backup protection: - Cumulative back up size of the mailboxes, SharePoint sites, and OneDrive accounts being protected. Size of OneDrive accounts and SharePoint sites are the size of the live OneDrive accounts and SharePoint sites as displayed in the live sitesΓÇÖ usage reports. Mailboxes are the size of the user's mailbox plus their online archives plus deleted items held for backup. - Deleted content in userΓÇÖs Recycle Bin and second-stage Recycle Bin (also known as Site Collection Recycle Bin). > [!NOTE]-> Restore points or size of restores will not be charged. Although Azure is being used to process the payments, there are no additional Azure API or storage costs beyond the Microsoft 365 Backup usage charges mentioned above. +> Restore points or size of restores will not be charged. Although Azure is being used to process the payments, there are no additional Azure API or storage costs beyond the Microsoft 365 Backup usage charges previously mentioned. -As an example, if you have a site under protection that is currently 1 GB for the first month, you'll be charged 1 GB of Backup usage. If you delete content in that site such that it's now only 0.5 GB, your next monthly bill will still be for 1 GB since the backup tool is retaining that deleted content for a year. After a year when the backup of that deleted content expires, the 0.5 GB being retained for backup purposes will no longer be charged for backup. +As an example, if you have a site under protection that is currently 1 GB for the first month, you are charged 1 GB of Backup usage. If you delete content in that site such that it's now only 0.5 GB, your next monthly bill will still be for 1 GB since the backup tool is retaining that deleted content for a year. After a year when the backup of that deleted content expires, the 0.5 GB being retained for backup purposes will no longer be charged for backup. > [!NOTE]-> These prices are subject to change when the product becomes generally available. A partner application integrated with Microsoft 365 Backup storage might charge a different rate for their service. --<!<Include charge model video >> +> A partner application integrated with Microsoft 365 Backup storage might charge a different rate for their service. ## Pricing calculator -The Microsoft 365 Backup pricing calculator is a tool that helps you estimate the amount of backup storage and the costs that you'll incur to protect and back up your Microsoft 365 data. +The Microsoft 365 Backup pricing calculator is a tool that helps you estimate the amount of backup storage and the costs that you incur to protect and back up your Microsoft 365 data. > [!NOTE] > The tool is not intended to provide an exact prediction of your backup consumption, but rather to give you an estimate based on your current usage reports that are forecasted for the next 24 months based on historical trends. The Microsoft 365 Backup pricing calculator, when calculating the storage requir ### Using the pricing calculator -To use the Microsoft 365 Backup pricing calculator, you'll need to perform the following steps. Information about how to collect data from each of these steps is detailed later in this article. +To use the Microsoft 365 Backup pricing calculator, you need to perform the following steps. Information about how to collect data from each of these steps is detailed later in this article. 1. Download the latest version of the [Microsoft 365 Backup pricing calculator tool](https://aka.ms/M365BackupCalculator). -2. Review your [Microsoft 365 usage reports](https://admin.microsoft.com/Adminportal/Home#/reportsUsage) to get historical information about your current usage. Heuristics from the usage reports will be used to populate the inputs (orange boxes) in the pricing calculator tool. +2. Review your [Microsoft 365 usage reports](https://admin.microsoft.com/Adminportal/Home#/reportsUsage) to get historical information about your current usage. Heuristics from the usage reports will be used to populate the inputs (orange boxes) in the pricing calculator tool. Content in the OneDrive and SharePoint recycle bins and data in a mailbox's online archives won't be reflected in these reports, but do affect the backup costs as previously described. 3. Open the Excel spreadsheet and select the **High-Level Estimates** worksheet. This sheet produces the simplest default model based on linear data growth assumptions. 4. Enter the information recorded from the usage reports into the **High-Level Estimates** worksheet. -5. If you know your tenant will have non-organic or non-linear usage changes, then for each of the service types, optionally override the estimated number of protection units or storage for a month in any or all of the service-specific tabs in the pricing calculator tool. +5. If you know your tenant has non-organic or non-linear usage changes, then for each of the service types, optionally override the estimated number of protection units or storage for a month in any or all of the service-specific tabs in the pricing calculator tool. ++6. An estimate of the Microsoft 365 Backup costs for the next 24 months, not including data currently in your OneDrive and SharePoint recycle bins or mailbox online archive folders, will then be generated. -6. An estimate of the Microsoft 365 Backup costs for the next 24 months will then be generated. + The size of your recycle bins can be roughly estimated as the amount of data you delete every three months in OneDrive and SharePoint. Your Mailbox online archives can be estimated by running the following Exchange Online PowerShell command: + + ```powershell + Get-MailboxStatistics -Identity "user@example.com" -Archive | Select DisplayName, TotalItemSize, ItemCount + ``` -### Leverage the Microsoft 365 usage reports as source data for the pricing calculator +### Use the Microsoft 365 usage reports as source data for the pricing calculator This section describes how to use your [Microsoft 365 admin center usage reports](https://admin.microsoft.com/Adminportal/Home#/reportsUsage) to populate the Microsoft 365 Backup pricing calculator. Number of total and active user mailboxes at the start of the period and at the  -This example does not show archive mailboxes, but any archive mailbox size will count towards your backup storage. +This example doesn't show archive mailboxes, but any archive mailbox size count towards your backup storage. ##### Storage Amount of storage used at the start of the period and at the end of the period. ### Pricing calculator notes -When using the Microsoft 365 Backup pricing calculator, be aware of the following: +When using the Microsoft 365 Backup pricing calculator, be aware of the following points: - In the Microsoft 365 Backup pricing calculator, any Excel spreadsheet cell that is colored orange can have data entered. When using the Microsoft 365 Backup pricing calculator, be aware of the followin - The estimate is calculated projecting forward from the end of period data. That is, Month 1 is calculated using the end of period data. -- The **Variables** worksheet displays the heuristics such as average growth and usage patterns of the service types which are used to calculate the estimate.+- The **Variables** worksheet displays the heuristics such as average growth and usage patterns of the service types that are used to calculate the estimate. -- The **Price per GB** field on the **Variables** worksheet can be modified if required. For the Microsoft 365 Backup solution, we recommend that you use the default value.+- The **Price per GB** field on the **Variables** worksheet can be modified if necessary. For the Microsoft 365 Backup solution, we recommend that you use the default value. - The OneDrive accounts, SharePoint sites, and Exchange mailboxes worksheets provide more detail on the estimated costs including the ability to override the estimated number of protection units or storage for a month. |
| backup | Backup Restore Data | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-restore-data.md | Title: Restore data in Microsoft 365 Backup (Preview) + Title: Restore data in Microsoft 365 Backup audience: admin Previously updated : 06/21/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Learn how to restore data using restore points and express restore points in Microsoft 365 Backup. -# Restore data in Microsoft 365 Backup (Preview) +# Restore data in Microsoft 365 Backup -> [!NOTE] -> This feature is currently in preview and subject to change. --Once you back up your data, you might need to restore the data if there was an accidental deletion, ransomware attack, or other event. The Restore feature in Microsoft 365 Backup is created to help you restore backed up data. --As part of restoring data from backup, admin needs to choose a *restore point* manually or from a recommended *express restore point* by the tool. +Once you back up your data, you might need to restore the data if there was an accidental deletion, ransomware attack, or other event. The restore feature in Microsoft 365 Backup is created to help you restore backed up data. -- **Restore point**. A prior point in time from which you can restore a healthy version of your content or metadata. If the data from a prior point in time is identical to the present state of your data, then there will be no items restored, including **Restore to a new folder** for Exchange Online.+As part of restoring data from backup, admin needs to choose a *restore point* manually or from a tool-recommended OneDrive or SharePoint *express restore point*. A restore point is a prior point in time from which you can restore a healthy version of your content or metadata. For Exchange Online, if the data from a prior point in time is identical to the present state of your data, then there will be no items restored, including Restore to a new folder. +<! +- **Restore point**. A prior point in time from which you can restore a healthy version of your content or metadata. For Exchange Online, if the data from a prior point in time is identical to the present state of your data, then there will be no items restored, including **Restore to a new folder**. - **Express restore point**. A set of recommended restore points that offers faster restore of data from the backup than a regular restore point. **We recommend you choose express restore point for faster restore performance.**+> -Currently, you can restore OneDrive accounts, SharePoint sites, and Exchange mailbox content from specific prior points in time from the backups. Site restores to a prior point in time, if restored to the same URL, will overwrite the state and the content of the site to match the exact state at the prior point in time. This is commonly referred to as a rollback versus a roll-forward. --Mailbox restores inherently restore only changed items such that current items that remain unchanged since the desired prior restore point won't be modified or overwritten. Thus, mailbox restores follow a roll-forward process. Site, OneDrive, and mailbox restores can be done in place or in the case of SharePoint sites to a new URL, or in the case of mailbox items a new folder. By restoring to a new location, any undesirable overwriting any existing data is avoided. --> [!NOTE] -> During the preview, only full OneDrive account and SharePoint site restore is possible. In the future, file-level granular restore will be possible. +Currently, you can restore OneDrive accounts, SharePoint sites, and Exchange mailbox content from specific prior points in time from the backups. -In the future, we'll support granular OneDrive and SharePoint file-level restore to provide a roll-forward behavior similar to that of mailbox item restores today. +<! +Site restores to a prior point in time, if restored to the same URL, overwrite the state and the content of the site to match the exact state at the prior point in time. This is commonly referred to as a rollback versus a roll-forward. -Restores started serially for each of three services will execute in parallel. There's no need to wait for one serviceΓÇÖs restore to finish before starting another. +Mailbox restores only change items that have been modified since the desired restore point, leaving unchanged items unmodified and not overwritten. Mailbox restores follow a roll-forward process. You can restore sites, OneDrive accounts, and mailboxes in place. For SharePoint sites, you can also restore to a new URL, and for mailbox items, you can restore to a new folder. Restoring to a new location prevents any unwanted overwriting of existing data. +Restores started serially for each of three services execute in parallel. There's no need to wait for one serviceΓÇÖs restore to finish before starting another. +> ## Restore point frequency The restore point frequency, also known as the [recovery point objective](backup-faq.md#what-is-the-service-recovery-point-objective) (RPO), defines the maximum amount of time during which data is lost after an attack. Stated differently, itΓÇÖs the time between the most recent backup of the healthy state of data and the time of the attack. The RPOs for each of the protected services are summarized in the following table. |Type |RPO for 0-14 days in the past |RPO for 15-365 days in the past | ||||-|Full OneDrive account and full SharePoint site restore |15 minutes |One week | +|Full OneDrive account and full SharePoint site restore |10 minutes |One week | |Exchange Online |10 minutes |10 minutes | ## Restore data from backup for OneDrive, SharePoint, and Exchange -Once you back up your data, you might need to restore the data if there was an accidental deletion, ransomware attack, or other event. The restore feature in Microsoft 365 Backup is created to help you restore backed up data. --> [!NOTE] -> We recommend choosing an express restore point for full account, site, or mailbox restores as it will provide the fastest restore experience. - Select the **OneDrive**, **SharePoint**, or **Exchange** tab for steps to restore data from backup for that product. # [OneDrive](#tab/onedrive) +> [!NOTE] +> We recommend choosing an express restore point for full account or site restores, as it will provide the fastest restore experience. Express restore is currently only relevant for SharePoint and OneDrive. + Follow these steps to restore data backed up for OneDrive. 1. In the Microsoft 365 admin center, on the **Microsoft 365 Backup** page, in the **OneDrive** section, select **Restore**. -2. On the **Select type of content** page, you'll see **OneDrive accounts** preselected. Select **Next**. +2. On the **Select type of content** page, **OneDrive accounts** is preselected. Select **Next**.  Follow these steps to restore data backed up for OneDrive.  - Choose a recommended restore point from **Select a faster restore point**, which will offer a faster restore compared to standard restore points. + Choose a recommended restore point from **Select a faster restore point**, which offers a faster restore compared to standard restore points.  - Backup will restore the closest backed up content *before* the specified date and time. Select **Next**. + Backup restores the closest backed up content *before* the specified date and time. Select **Next**. For example, assume backup is taken October 2, 2023 8:00 AM and October 2, 10:00 AM PST. If you select date and time as October 2, 2023 9:00 AM PST, Microsoft 365 Backup will restore the OneDrive and its content to its state on October 2, 2023 8:00 AM PST. -5. On the **Confirm restore points** page, you're presented with a list of available express restore points that will restore with better performance than non-express restore points. We highly recommend that you choose an express restore point all else equal. +5. On the **Confirm restore points** page, you see a list of available express restore points that restore with better performance than nonexpress restore points. We highly recommend that you choose an express restore point all else equal.  6. Confirm the restore point in time to which the data will be restored from backup. If the restore point is correct, select **Next**. + Restoring a OneDrive to a prior point in time, if restored to the same URL, overwrites the OneDrive-scoped metadata and the content of the OneDrive to match the exact state at the prior point in time. If restored to a new URL, the content and OneDrive-scoped metadata will be restored to that prior point in time in the new URL. + 7. On the **Select another backup** panel, choose another backup for the account selected, if needed.  -8. On the **Set destination** page, selected OneDrive accounts can be restored by choosing either the **Restore to the original OneDrive accounts** or **Create new SharePoint site and restore to there** option. +8. On the **Choose destination** page, selected OneDrive accounts can be restored by choosing either the **Replace accounts with backups** or **Create new SharePoint sites and restore to them** option.  - a. **Restore to the original OneDrive accounts** option - - The entire OneDrive is replaced by the backed-up version chosen based on the restore point. - - File and folder permissions are also reverted to the selected date and time. + a. **Replace accounts with backups**. The entire OneDrive is replaced by the backed-up version chosen based on the restore point. File and folder permissions are also reverted to the selected date and time. - b. **Create new SharePoint site and restore to there** option - - The entire OneDrive will restore to a new SharePoint site where you can then copy or move data into the original OneDrive to create a roll-forward type of restore and avoid overwriting currently healthy data. + b. **Create new SharePoint sites and restore to them**. The entire OneDrive is restored to a new SharePoint site. You can then copy or move data into the original OneDrive to create a roll-forward type of restore and avoid overwriting currently healthy data.<br><br>When you restore using this option, the new site URL will have an "R" followed by a number concatenated to the end. For example, if the original URL was `https://contoso-my.sharepoint.com/personal/user1_contoso_com` the restored site could be `https://contoso-my.sharepoint.com/personal/user1_contoso_comR0`. The number at the end increments to avoid URL name conflicts up to 1,000 total restores. After that you should delete some of those new URLs to clear namespace for future new-URL restores. -9. On the **Review and Finish** page, you're asked to review and finish all your choices. If everything looks as you want it, select **Restore OneDrive accounts**. +9. On the **Review and Finish** page, review and finish all your choices. If everything looks as you want it, select **Restore OneDrive accounts**.  # [SharePoint](#tab/sharepoint) +> [!NOTE] +> We recommend choosing an express restore point for full account or site restores, as it will provide the fastest restore experience. Express restore is currently only relevant for SharePoint and OneDrive. + Follow these steps to restore data backed up for SharePoint. 1. In the Microsoft 365 admin center, on the **Microsoft 365 Backup** page, in the **SharePoint** section, select **Restore**. -2. On the **Select type of content** page, you'll see **SharePoint site content** preselected. Select **Next**. +2. On the **Select type of content** page, you see **SharePoint site content** preselected. Select **Next**.  Follow these steps to restore data backed up for SharePoint.  - Choose a recommended restore point from **Select a faster restore point**, which will offer a faster restore compared to standard restore points. + Choose a recommended restore point from **Select a faster restore point**, which provides a faster restore compared to standard restore points. We recommend choosing a fast restore point because it can restore faster for single site restores, especially smaller ones (on the order of 10 to 120 minutes on average).  - Backup will restore the closest backed up content *before* the specified date and time. Select **Next**. + Backup restores the closest backed up content *before* the specified date and time. Select **Next**. For example, assume backup is taken October 2, 2023 8:00 AM and October 2, 2023 10:00 AM PST. If you select date and time as October 2, 2023, 9:00 AM PST, Microsoft 365 Backup will restore the site and its content to the state present on October 2, 2023 8:00 AM PST. -5. On the **Confirm restore points** page, you'll be presented with a list of available express restore points that will restore with better performance than non-express restore points. We highly recommend that you choose an express restore point all else equal. +5. On the **Confirm restore points** page, you see a list of available express restore points that restore with better performance than nonexpress restore points. We highly recommend that you choose an express restore point all else equal.  6. Confirm the restore point in time to which the data will be restored from backup. If the restore point is correct, select **Next**. + Restoring a SharePoint site to a prior point in time, if restored to the same URL, overwrites the SharePoint-scoped metadata and the content of the SharePoint site to match the exact state at the prior point in time. If restored to a new URL, the content and SharePoint-scoped metadata will be restored to that prior point in time in the new URL. + 7. On the **Select another backup** panel, choose another backup for the site selected, if needed.  -8. On the **Set destination** page, selected SharePoint sites can be restored by choosing either the **Restore to the original OneDrive accounts** or **Create new SharePoint site and restore to there** option. +8. On the **Choose destination** page, selected SharePoint sites can be restored by choosing either the **Replace sites with backups** or **Create new sites from backups** option.  - a. **Restore to original sites** option - - The entire original site is replaced by the backed-up version chosen based on the restore point. - - File and folder permissions and all metadata state are also reverted to the selected date and time. + a. **Replace sites with backups**. The entire original site is replaced by the backed-up version chosen based on the restore point. File and folder permissions and all metadata states are also reverted to the selected date and time. - b. **Create new SharePoint site and restore to there** option - - The entire site will restore to a new SharePoint site where you can then copy or move data into the original site or a different site to create a roll-forward type of restore and avoid overwriting currently healthy data. + b. **Create new sites from backups**. The entire site is restored to a new SharePoint site. You can then copy or move data into the original site or a different site to create a roll-forward type of restore and avoid overwriting currently healthy data.<br><br>When you restore using this option, the new site URL will have an "R" followed by a number concatenated to the end. For example, if the original URL was `https://contoso.sharepoint.com/sites/originalSite` the restored site could be `https://contoso.sharepoint.com/sites/originalSiteR0`. The number at the end increments to avoid URL name conflicts up to 1,000 total restores. After that you should delete some of those new URLs to clear namespace for future new-URL restores. -9. On the **Review and Finish** page, you're asked to review and finish your choices. If everything looks as you want it, select **Restore sites**. +9. On the **Review and Finish** page, review and finish your choices. If everything looks as you want it, select **Restore sites**.  - # [Exchange](#tab/exchange) -<!Once you have set up protection policies for your mailboxes, you might need to restore the data in case of an accidental deletion, ransomware attack, or other event. The Restore feature in Microsoft 365 Backup is created to help you restore backed up data. Exchange restores will only restore modified or deleted items. Any item that is unaffected in the visible folder structure will remain intact.> +Microsoft 365 Backup restores deleted or modified mailbox items from the selected prior point in time. Items that remain unchanged in the primary mailbox are compared to that prior point in time, and new items since that prior point in time aren't restored, reverted, or overwritten. This is true whether an in-place or new-folder restore is conducted and is done to prevent excessive operations that might overload your mailbox and its associated storage allocation. Follow these steps to restore data backed up for Exchange. 1. In the Microsoft 365 admin center, on the **Microsoft 365 Backup** page, in the **Exchange** section, select **Restore**. -2. On the **Select type of content** page, you'll see **Exchange mailbox content (emails, notes, contacts, calendars, and tasks)** preselected. Select **Next**. Note that calendar restores aren't supported during the preview. +2. On the **Select type of content** page, you see **Exchange mailbox content (emails, notes, contacts, calendars, and tasks)** preselected. Select **Next**. 3. From the list of backed up Exchange accounts, select the accounts to restore, and then select **Next**. -4. On the **Content scope** page, you'll see two options to choose from: +4. On the **Content scope** page, you see two options to choose from: - [Option 1: All emails, notes, contacts, calendars, and tasks](#option-1-all-emails-notes-contacts-calendars-and-tasks) - [Option 2: Selected content only](#option-2-selected-content-only) ### Option 1: All emails, notes, contacts, calendars, and tasks -1. Use this option to perform a full mailbox restore, On the **Content scope** page, the **All emails, notes, contacts, calendars, and tasks** option lets you restore all emails, notes, contacts, and tasks, and modified calendar items for that user account. Select the last known good (LKG) date and time from which you want to restore the content. Make sure that the time zone in the dropdown menu reflects your intention, and select **Next**. +1. Use this option to perform a full mailbox restore of all modified and deleted items. On the **Content scope** page, the **All emails, notes, contacts, calendars, and tasks** option will restore all modified or deleted emails, notes, contacts, and tasks, and calendar items for that user account to the specified time and date. Select **Next**.  For example, the last time the end user remembers seeing their mailbox in a "good state" was October 2, 2023 8:00 AM. However, on October 2, 2023 9:00 AM they saw all of their emails were encrypted (possible ransomware attack), choose the last known good time as October 2, 2023 8:00 AM. -2. Now you're asked to confirm the restore point in time to which the data will be restored from backup. The page informs you whether there are any backups to restore from the LKG time chosen. If you see no errors, you can proceed. If there are errors, you have the option to choose another LKG time. Select **Next**. +2. Confirm the restore point in time to which the data will be restored from backup. The page informs you whether there are any backups to restore from the Last known good (LKG) time chosen. If you see no errors, you can proceed. If there are errors, you can choose another LKG time. Select **Next**. 3. The destination of restored items can be chosen from two options, then select **Next**. - a. **Restore to a new folder** where the content will be restored to a newly created folder named *Restored Items YYYY-DD-MM, HH:MM*. + a. **Create a new folder for the backups** where the content will be restored to a newly created folder named *Restored Items YYYY-DD-MM, HH:MM*. - b. **Restore in place** where current version of the item will be overwritten by the restored content. + b. **Replace mailbox items with backups** where current version of the item will be overwritten by the restored content. -4. On the **Review and Finish** page, you'll now be asked to review and finish all your choices. If everything looks as you want it, select **Restore user mailboxes**. +4. On the **Review and finish** page, review and finish all your choices. If everything looks as you want it, select **Restore user mailboxes**. 5. Track the progress of your newly created task on the **Restoration tasks** tab. Follow these steps to restore data backed up for Exchange. Choose the time period, then filter and value that you want to do a granular search on to find matching items. -2. Now you're asked to confirm the restore point in time to which the data will be restored from backup. If the restore point is what you want, select **Next**. +2. Confirm the restore point in time to which the data will be restored from backup. If the restore point is what you want, select **Next**. 3. The destination of restored items can be chosen from two options, then select **Next**. Follow these steps to restore data backed up for Exchange. b. **Restore in place** where the current version of the item will be overwritten by the restored content. -4. On the **Review and Finish** page, you'll now be asked to review and finish all your choices. If everything looks as you want it, select **Restore user mailboxes**. +4. On the **Review and Finish** page, review and finish all your choices. If everything looks as you want it, select **Restore user mailboxes**. 5. Track the progress of your newly created task on the **Restoration tasks** tab. ++ ### States of backup |States |Definition | Follow these steps to restore data backed up for Exchange. |Not set up | No backup policy is set up for this scope. | |Processing | A change to backup policy or a restore is in progress. | -+## Multi-geo environments ++Microsoft 365 Backup supports restoring sites and user accounts from both central and satellite locations if the multi-geo feature is enabled on your tenant. This lets you: ++- View sites or accounts from all the geos while selecting sites or accounts during the restore operation. ++- Add or remove sites or accounts from all the geos during the restore operation. ++Microsoft 365 Backup supports the backup and restoration of any site and user account even if that site or user account has moved from one geo to another geo. If the site or user account has moved to a new geo, and youΓÇÖre restoring data from a prior point back in time when the site or user account was in older geo, then the restored site or user account will be available in the new geo. ++> [!NOTE] +> After a multi-geo move, a OneDrive account and SharePoint site will only be able to restore to the weekly restore points until an enhancement is deployed (enhancement coming soon). ++## Considerations when using restore ++- Site search is case-sensitive and is a prefix-type search. ++- SharePoint sites and OneDrive accounts being restored to a prior point in time aren't locked in a read-only state. Therefore, users might not realize their current edits will be imminently rolled back and lost. ++- For restores to a new URL, it might take up to 15 minutes for the destination URL to be displayed in the tool once a SharePoint site or OneDrive account restore to a new URL session completes. ++- For restores to a new URL, only the admin who executed the restore has ownership permissions for the restored SharePoint sites or OneDrive accounts in the new URLs. Restores to the same URL reverts permissions to their original state. ++- A site or OneDrive account that is under the strict SEC 17a-4(f) hold policy will fail any in-place restores so as to honor that immutability promise. For sites under that type of hold, you have to restore to a new URL or remove the hold. Any other type of preservation hold that doesn't have a strict admin lockout will allow an in-place restore. Restoring these types of sites as the preservation hold library will be reverted to the prior point in time. A new URL restore is recommended for that type of site as the cleanest option. ++- The restore point frequency dictates the points in time from which you can recover a prior state of your data. Restore points start being generated when you enable the backup policy for a given OneDrive account, SharePoint Site, or Exchange Online mailbox. For Exchange Online, restore points are available for 10 minutes for the entire year. For OneDrive and SharePoint, the available restore points drop to weekly from 10 minutes for the first two weeks. Based on the defined and currently invariable backup frequency setting previously described, the following example highlights what is possible. ++ - Megan, the Backup admin, enables a policy for the SharePoint site ΓÇ£HR HubΓÇ¥ on February 1, 2025, at 8:00 AM PST. At 10:00 AM PST, she has the option of rolling back the state of the site to any 10-minute period between 8:00 AM and 10:00 AM PST. ++ - On April 1, 2025, she has the option to roll back the site to any 10-minute period in the prior 14 days (that is, any 10-minute period between March 18 and the current date-time). If she wants to choose an earlier prior point in time, she would need to choose March 15, 8, or 1, and so on, back through February 1, or up to 52 weeks if the policy was created at least 52 weeks in the past. ++ - Megan then adds a userΓÇÖs mailbox to the policy on February 1, 2025, at 11:00 AM PST. She'll have the option of restoring modified or deleted items from that user's mailbox to any 10-minute period during the entire retention period. ++- Users whose Microsoft Entra ID has been deleted will be displayed as blank lines in the restore picker experience for OneDrive and Exchange Online since those users no longer exist in the environment. Rest assured, their historical backups still exist in the Backup tool, but some [special handling is needed to restore them](backup-faq.md#what-is-the-service-recovery-point-objective). ++- Mailbox draft items aren't backed up or restorable. ++- For calendar item item restore, restoring organizer copy doesn't automatically make attendee copies catch up, it only allows future updates by organizer to work for all users added on the calendar item. ++- To restore a OneDrive account and Exchange mailbox for a user who is deleted from Microsoft Entra ID, use this instruction: ++ > [!NOTE] + > Deleted users will appear as "ΓÇô" in the user interface because the user does not exist in the tenancy. However, the backups and associated restore points will be retained for the full 365-day retention period from when a given restore point was originally created. ++ If the user has been deleted within the past 30 days, the best option is to restore the user based on instructions found at [Restore a user in the Microsoft 365 admin center](/microsoft-365/admin/add-users/restore-user). Once the user is reconstituted, the name will reappear in the Backup tool restore experience, and the rest of the experience will work as normal. ++ For OneDrive, you can restore the OneDrive to the original URL or a new URL. At that time, the OneDrive is in an "orphaned" state. To connect the OneDrive to a user, see [Fix site user ID mismatch in SharePoint or OneDrive](/sharepoint/troubleshoot/sharing-and-permissions/fix-site-user-id-mismatch). ++ For Exchange, if the user account is currently or permanently deleted, Microsoft 365 Backup retains the inactive mailbox for the duration of the backup policy. To recover and restore the inactive mailbox, see the following guidance: ++ - [Recover an inactive mailbox](/purview/recover-an-inactive-mailbox) + - [Restore an inactive mailbox](/purview/restore-an-inactive-mailbox) ++ Once an inactive mailbox is recovered and restored to a new mailbox, the new mailbox must be added to the backup policy if desired. +<! +- While restoring Exchange mailboxes at a granular level, the search feature provides several search parameters. These parameters allow you to enter up to a maximum of five keywords each. For example, the parameters "from" and "to" allow you to enter up to a maximum of five email addresses each. +> +- OneDrive accounts and SharePoint sites that undergo the following types of changes won't be undoable via restore: tenant rename, tenant move, and site URL change. ++- If there are no differences between the current state of a mailbox and the prior point in time from which you're attempting a restore, a restore isn't performed and no new folders are created when a "restore to a new location" request is made. ++- SharePoint sites and OneDrive accounts being restored to a new URL have a read-only lock on that new URL until the restore completes. The [Global Administrator](/entra/identity/role-based-access-control/permissions-reference#global-administrator) can still download documents or remove the read-only lock manually. ++ [!INCLUDE [global-administrator-note](../includes/global-administrator-note.md)] ++- Abusive restore actions aren't permitted. You should limit restores for testing purposes to no more than twice a month per protection unit. Restores for real recovery purposes aren't limited. |
| backup | Backup Setup | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-setup.md | Title: Set up Microsoft 365 Backup (Preview) + Title: Set up Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Learn how to set up and configure Microsoft 365 Backup and backup policies. -# Set up Microsoft 365 Backup (Preview) --> [!NOTE] -> Microsoft 365 Backup (Preview) is now available worldwide in all commercial cloud environments. General availability is expected to be mid-2024. This preview feature is subject to change and [limitations as defined](backup-limitations.md). Before you begin, read the [Microsoft 365 Backup preview terms and conditions](backup-preview-terms.md). +# Set up Microsoft 365 Backup Get started with Microsoft 365 Backup by following these simple three steps in the Microsoft 365 admin center.  -<!<insert how-to Affirma video ΓÇô https://aka.ms/M365Backup-how-to-video> > - ## Step 1: Set up pay-as-you-go billing --Microsoft 365 Backup is a pay-as-you-go offering that charges based on consumption, unlike traditional seat-based licenses. To set up pay-as-you-go for Microsoft 365 Backup, you will need to have this information: +Microsoft 365 Backup is a pay-as-you-go offering that charges based on consumption, unlike traditional user-based licenses. To set up pay-as-you-go for Microsoft 365 Backup, you'll need to have this information: > [!div class="checklist"] > * **Valid Azure subscription**. An Azure subscription provides a logical container for your resources. Each Azure resource is associated with only one subscription. Creating a subscription is the first step in adopting Azure. To learn more about Azure, see [Azure fundamental concepts](/azure/cloud-adoption-framework/ready/considerations/fundamental-concepts). Microsoft 365 Backup is a pay-as-you-go offering that charges based on consumpti > * **Region**. The region in which you want to register the service. > * **Owner or contributor**. Name of an owner or contributor role on the Azure subscription. -Once you have the information on this list, you are ready to [set up pay-as-you-go billing for Microsoft 365 Backup](backup-billing.md). +Once you have the information on this list, you're ready to [set up pay-as-you-go billing for Microsoft 365 Backup](backup-billing.md). </br> You must be a [SharePoint Administrator](/entra/identity/role-based-access-contr ## Step 2: Turn on Microsoft 365 Backup -To turn on Microsoft 365 Backup, you'll need to go to the Microsoft 365 admin center. +To turn on Microsoft 365 Backup, you need to go to the Microsoft 365 admin center. 1. In the [Microsoft 365 admin center](https://admin.microsoft.com/Adminportal/Home), select **Setup**. To turn on Microsoft 365 Backup, you'll need to go to the Microsoft 365 admin ce 3. On the **Automate content processes with Syntex** page, select **Go to Syntex settings**. -4. On the Syntex page, in the left navigation, select **Storage**. From the list of products, select **Backup Preview**. +4. On the Microsoft Syntex page, in the left navigation, select **Storage**. From the list of products, select **Backup**. 5. By default, the feature is turned off. On the **Backup** panel, select **Turn on** to enable Microsoft 365 Backup for your organization. -6. Review the applicable [terms of service for Microsoft 365 Backup](backup-preview-terms.md) and select **Confirm**. +6. Review the applicable [terms of service for Microsoft 365](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all) and select **Confirm**. -<! -8. Select **Go to Microsoft 365 Backup** to start setting up Microsoft 365 Backup on OneDrive, SharePoint, or Exchange. --  -> ## Step 3: Create backup policies to protect your data Now that you have enabled Microsoft 365 Backup for your organization, follow thr  +4. [Create backup policies for OneDrive, SharePoint, or Exchange](backup-view-edit-policies.md#create-backup-policies). +<! ### Set up backup policies for OneDrive, SharePoint, and Exchange To use Microsoft 365 Backup for OneDrive, SharePoint, or Exchange, you need to create a backup policy for each product. A *policy* represents the backup plan defined by admins for protecting the Microsoft 365 data of an organization. Follow these steps to set up a backup policy for OneDrive accounts using Microso  +6. On the **Choose selection method** page, you can set up OneDrive user accounts using any or all three ways. A protection scope is the scope of user accounts within OneDrive that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of accounts in a CSV file**, you can upload a list of accounts to backup via a CSV file. ++ The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up accounts that match specific filters**, you can select **Distribution lists** or **Security groups**, or both. The distribution list and security group are flattened when added, meaning the policy won't update dynamically if the groups or distribution list are updated later. ++ The rule-based feature for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select accounts individually**, you can search and select accounts you want to add to a backup policy. ++<! 6. On the **Protection scope** page, you can set up OneDrive user accounts using any or all three ways. A protection scope is the scope of user accounts within OneDrive that you want to protect with Microsoft 365 Backup.  Follow these steps to set up a backup policy for OneDrive accounts using Microso  + The rule-based feature for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and maximum of 255 characters. ++ The rule-based feature for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. + c. Under **Import from file**, select **Upload CSV** to import user account details via CSV upload.  + The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. +> +<! +7. Once you've made the right selections, select **Next** to create the backup policy for OneDrive. + 8. On the **Review OneDrive backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). 9. The backup policy for OneDrive is created.  + Once the sites are added to a backup policy, it might take up to 15 minutes per 1,000 sites for restore points to become available for restore. + # [SharePoint](#tab/sharepoint) Follow these steps to set up a backup policy for SharePoint sites using Microsoft 365 Backup. Follow these steps to set up a backup policy for SharePoint sites using Microsof  +6. On the **Choose selection method** page, you can set up SharePoint sites using any or all three ways. A protection scope is the scope of user accounts within OneDrive that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of sites in a CSV file**, you can upload a list of accounts to backup via a CSV file. ++ The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up sites that match specific filters**, you can select **Site name or URL contains** or **Site last modified**, or both. ++ The rule-based feature for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and maximum of 255 characters. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select sites individually**, you can search and select sites you want to add to a backup policy. ++<! 6. On the **Protection scope** page, you can set up SharePoint sites by choosing to back up individual sites or collection of sites. A protection scope is the scope of sites within SharePoint that you want to protect with Microsoft 365 Backup.  Follow these steps to set up a backup policy for SharePoint sites using Microsof b. Under **Add via**, select **Distribution lists** or **Security groups**, or both. The distribution list and security group are flattened when added, meaning the policy won't update dynamically if the groups or distribution list are updated later. + The rule-based feature for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and maximum of 255 characters. ++ The rule-based feature for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. + c. Under **Import from file**, select **Upload CSV** to import user account details via CSV upload.  + The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. +> +<! 7. Once you've made the right selections, select **Next** to create the backup policy for SharePoint. 8. On the **Review SharePoint backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). Follow these steps to set up a backup policy for SharePoint sites using Microsof  + Once the sites are added to a backup policy, it might take up to 15 minutes per 1,000 sites for restore points to become available for restore. + # [Exchange](#tab/exchange) Follow these steps to set up a backup policy for Exchange mailboxes sites using Microsoft 365 Backup. Ensure that Microsoft 365 Backup is [enabled for your tenant](#step-2-turn-on-microsoft-365-backup). Follow these steps to set up a backup policy for Exchange mailboxes sites using  +6. On the **Choose selection method** page, you can set up Exchange mailboxes using any or all three ways. A protection scope is the scope of mailboxes within Exchange that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of mailboxes in a CSV file**, you can upload a list of accounts to backup via a CSV file. ++ The CSV upload feature for bulk addition of mailboxes in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up mailboxes that match specific filters**, you can select **Distribution lists** or **Security groups**, or both. The distribution list and security group are flattened when added, meaning the policy won't update dynamically if the groups or distribution list are updated later. ++ The rule-based feature for bulk addition of mailboxes via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select mailboxes individually**, you can search and select mailboxes you want to add to a backup policy. ++<! 6. On the **Protection scope** page, choose the scope of protection for the mailbox policy. Microsoft 365 Backup for Exchange allows the addition of mailboxes in three ways.  Follow these steps to set up a backup policy for Exchange mailboxes sites using  + The rule-based feature for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and maximum of 255 characters. ++ The rule-based feature for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. + c. Under **Import from file**, select **Upload CSV** to import user account details via CSV upload.  + The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. +> +<! 7. Once you've made the right selections, select **Next** to create the backup policy for Exchange. 8. On the **Review Exchange backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). Follow these steps to set up a backup policy for Exchange mailboxes sites using  + Once the mailboxes are added to a backup policy, it might take up to 15 minutes per 1,000 mailboxes for restore points to become available for restore. +> ++## Multi-geo environments ++Microsoft 365 Backup supports the backup of sites and user accounts from both the central and satellite locations if the multi-geo feature is enabled on your tenant. This means that you can add the sites or user accounts from all geos while creating the backup configuration policy via the CSV file upload method. Adding sites via the site picker, search, or filter rules doesn't currently support multi-geo. Those user interface experiences today only support addition of sites in the tenant's central location. ## Admin roles and backup management privileges Only tenant-level admins can create and manage backups using Microsoft 365 Backu - **Protection units** ΓÇô SharePoint sites, OneDrive accounts, or Exchange Online mailboxes backed up by the Microsoft 365 Backup tool. -- **Restore point** ΓÇô A prior point in time from which you can restore a version of your content and metadata. If the protection unit from a prior point in time is identical to the present state of your data, then a restore from that point will have no impact on your current data.+- **Restore point** ΓÇô A prior point in time from which you can restore a version of your content and metadata. If the protection unit from a prior point in time is identical to the present state of your data, then a restore from that point has no affect on your current data. - **RPO** ΓÇô Recovery point objective, or how close in time the most recent restore point is to an impacting event. -- **RTO** ΓÇô Recovery time objective, or how fast a restore to a prior point in time can complete.+- **RTO** ΓÇô Recovery time objective, or how fast a restore to a prior point in time might complete. |
| backup | Backup View Edit Policies | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/backup-view-edit-policies.md | Title: View and edit backup policies in Microsoft 365 Backup (Preview) + Title: Create, view, and edit backup policies in Microsoft 365 Backup audience: admin Previously updated : 04/11/2024 Last updated : 07/31/2024 search.appverid: - essentials-manage ms.localizationpriority: medium-description: Learn how to view and edit backup policies in Microsoft 365 Backup. +description: Learn how to create, view, and edit backup policies in Microsoft 365 Backup. -# View and edit backup policies in Microsoft 365 Backup (Preview) +# Create, view, and edit backup policies in Microsoft 365 Backup -> [!NOTE] -> This feature is currently in preview and subject to change. +## Create backup policies -You can edit the scope of OneDrive accounts, SharePoint sites, and Exchange mailboxes associated with a backup policy. As part of edit, you can either add new accounts, sites, or mailboxes to or remove them from backup. Removing accounts, sites, and mailboxes from Microsoft 365 Backup doesn't mean existing backups will be deleted, rather it means additional backups will not be taken. +To use Microsoft 365 Backup for OneDrive, SharePoint, or Exchange, you need to create a backup policy for each product. A *policy* represents the backup plan defined by admins for protecting the Microsoft 365 data of an organization. ++A policy contains details of what data (OneDrive accounts, SharePoint sites, and Exchange mailboxes) to protect. Although you see the retention period and backup frequency (which defines the restore point objective), those settings aren't currently variable or modifiable. ++Select the **OneDrive**, **SharePoint**, or **Exchange** tab for steps to create a backup policy for that product. ++# [OneDrive](#tab/onedrive) ++Follow these steps to set up a backup policy for OneDrive accounts using Microsoft 365 Backup. ++1. Go to the [Microsoft 365 admin center](https://admin.microsoft.com/Adminportal/Home). ++2. Select **Settings**. ++3. Select **Microsoft 365 Backup** from the list of products. ++4. On the **Microsoft 365 Backup** page, in the **OneDrive** section, select **Set up policy**. ++  ++5. On the **Overview** page, review the backup features for OneDrive, and then select **Next**. ++  ++6. On the **Choose selection method** page, you can set up OneDrive user accounts using any or all three ways. A protection scope is the scope of user accounts within OneDrive that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of accounts in a CSV file**, you can upload a list of accounts to back up via a CSV file. ++ The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up accounts that match specific filters**, you can select **Distribution lists** or **Security groups**, or both. The distribution list and security group are flattened when added, meaning the policy won't update dynamically if the groups or distribution list are updated later. ++ The rule-based feature for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example, groups or lists won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select accounts individually**, you can search and select accounts you want to add to a backup policy. ++7. Once you've made the right selections, select **Next** to create the backup policy for OneDrive. ++8. On the **Review OneDrive backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). ++9. The backup policy for OneDrive is created. ++  ++ Once the sites are added to a backup policy, it might take up to 15 minutes per 1,000 sites for restore points to become available for restore. ++# [SharePoint](#tab/sharepoint) ++Follow these steps to set up a backup policy for SharePoint sites using Microsoft 365 Backup. ++1. Go to the [Microsoft 365 admin center](https://admin.microsoft.com/Adminportal/Home). ++2. Select **Settings**. ++3. Select **Microsoft 365 Backup** from the list of products. ++4. On the **Microsoft 365 Backup** page, in the **SharePoint** section, select **Set up policy**. ++  ++5. On the **Overview** page, review the backup features for SharePoint, and then select **Next**. ++  ++6. On the **Choose selection method** page, you can set up SharePoint sites using any or all three ways. A protection scope is the scope of user accounts within OneDrive that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of sites in a CSV file**, you can upload a list of accounts to back up via a CSV file. ++ The CSV upload feature for bulk addition of sites or user accounts in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up sites that match specific filters**, you can select **Site name or URL contains** or **Site last modified**, or both. ++ The rule-based feature for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and maximum of 255 characters. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select sites individually**, you can search and select sites you want to add to a backup policy. ++7. Once you've made the right selections, select **Next** to create the backup policy for SharePoint. ++8. On the **Review SharePoint backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). ++  ++9. The backup policy for SharePoint is created. ++  ++ Once the sites are added to a backup policy, it might take up to 15 minutes per 1,000 sites for restore points to become available for restore. ++# [Exchange](#tab/exchange) ++Follow these steps to set up a backup policy for Exchange mailboxes sites using Microsoft 365 Backup. ++1. Go to the [Microsoft 365 admin center](https://admin.microsoft.com/Adminportal/Home). ++2. Select **Settings**. ++3. Select **Microsoft 365 Backup** from the list of products. ++4. On the **Microsoft 365 Backup** page, in the **Exchange** section, select **Set up policy**. ++  ++5. On the **Overview** page, review and verify the backup policy attributes for Exchange, such as backup frequency, backup retention, cost details, and then select **Next**. ++  ++6. On the **Choose selection method** page, you can set up Exchange mailboxes using any or all three ways. A protection scope is the scope of mailboxes within Exchange that you want to protect with Microsoft 365 Backup. ++  ++ a. Under **Upload a list of mailboxes in a CSV file**, you can upload a list of accounts to back up via a CSV file. ++ The CSV upload feature for bulk addition of mailboxes in the backup policy creation workflow can accommodate a maximum of 50,000 entries per CSV file. ++ b. Under **Back up mailboxes that match specific filters**, you can select **Distribution lists** or **Security groups**, or both. The distribution list and security group are flattened when added, meaning the policy won't update dynamically if the groups or distribution list are updated later. ++ The rule-based feature for bulk addition of mailboxes via security groups or distribution lists can accommodate a maximum of three groups at a time. These rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time of adding to the backup configuration policy. For example. groups or list won't be dynamically updated in the system if users are added or removed from the original security group. ++ > [!NOTE] + > The site last modified feature is in preview. ++ c. Under **Select mailboxes individually**, you can search and select mailboxes you want to add to a backup policy. ++7. Once you've made the right selections, select **Next** to create the backup policy for Exchange. ++8. On the **Review Exchange backup policy** page, review the information to make sure it's how you want it, and then select **Create policy** (or **Update policy** if it's an update). ++  ++9. Wait for status of your policy to show as **Active** in the home screen. This might take between 15 and 60 minutes. The backup policy for Exchange is created. Select **View scope** at any time to verify the details. ++  ++ Once the mailboxes are added to a backup policy, it might take up to 15 minutes per 1,000 mailboxes for restore points to become available for restore. +++## View and edit backup policies ++You can edit the scope of OneDrive accounts, SharePoint sites, and Exchange mailboxes associated with a backup policy. As part of edit, you can either add new accounts, sites, or mailboxes to or remove them from backup. Removing accounts, sites, and mailboxes from Microsoft 365 Backup doesn't mean existing backups will be deleted, rather it means additional backups won't be taken. Select the **OneDrive**, **SharePoint**, or **Exchange** tab for steps to view and edit backup policies for that product. Follow these steps to view and edit backup policies for OneDrive. a. To add new accounts, on the **Backed up accounts** tab, select **+ Add accounts**. - b. Select the accounts from the list. Once you have added accounts to the list, follow the prompts to update the policy. + b. Select the accounts from the list. Once you add accounts to the list, follow the prompts to update the policy.  Follow these steps to view and edit backup policies for OneDrive.  -> [!NOTE] -> Removing accounts from backup policy means no future backups will be taken for those removed accounts. Existing backups for those accounts will not be deleted. + > [!NOTE] + > Removing accounts from backup policy means no future backups will be taken for those removed accounts. Existing backups for those accounts will not be deleted. # [SharePoint](#tab/sharepoint) Follow these steps to view and edit backup policies in SharePoint.  - c. To remove sites from existing SharePoint backup policy, on the **Backed up sites** tab,select the relevant sites, and then select **Remove**. Once you have done your changes, follow the prompts to remove the sites. + c. To remove sites from existing SharePoint backup policy, on the **Backed up sites** tab, select the relevant sites, and then select **Remove**. Once you have done your changes, follow the prompts to remove the sites.  Follow these steps to view and edit backup policies in SharePoint.  -> [!NOTE] -> Removing sites from backup policy means no future backups will be taken for those removed sites. Existing backups for the removed sites will not be deleted. + > [!NOTE] + > Removing sites from backup policy means no future backups will be taken for those removed sites. Existing backups for the removed sites will not be deleted. # [Exchange](#tab/exchange) Follow these steps to view and edit backup policies for Exchange.  -> [!NOTE] -> Removing mailboxes from backup policy means no future backups will be taken for those removed mailboxes. Existing backups for those mailboxes will not be deleted. + > [!NOTE] + > Removing mailboxes from backup policy means no future backups will be taken for those removed mailboxes. Existing backups for those mailboxes will not be deleted. |
| backup | Backup 3P Billing | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/storage/backup-3p-billing.md | Title: Set up third-party billing for Microsoft 365 Backup Storage (Preview) + Title: Set up third-party billing for Microsoft 365 Backup Storage audience: admin Previously updated : 06/03/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Set up third-party billing for Microsoft 365 Backup Storage. -# Set up third-party billing for Microsoft 365 Backup Storage (Preview) --> [!NOTE] -> This feature is currently in preview and subject to change. +# Set up third-party billing for Microsoft 365 Backup Storage Developers can create an application to manage Microsoft 365 Backup Storage in their customer's tenants. However, a Billing Policy must be created that associates your Microsoft 365 Backup Storage application to pay-as-you-go billing that has been configured in your tenant. To create a Billing Policy, you need to perform the following steps: > [!WARNING] > This step needs to be performed in the same tenant that your Microsoft 365 Backup Storage application was created and registered in. That is, this should be performed in your tenant (and not your customer's tenants). Failure to do so will mean that your request to create a Billing Policy will be rejected. -Microsoft 365 Backup is a pay-as-you-go offering that charges based on consumption, unlike traditional seat-based licenses. To set up pay-as-you-go for Microsoft 365 Backup, you'll need to have this information: +Microsoft 365 Backup is a pay-as-you-go offering that charges based on consumption, unlike traditional seat-based licenses. To set up pay-as-you-go for Microsoft 365 Backup, you need to have this information: - **Valid Azure subscription.** An Azure subscription provides a logical container for your resources. Each Azure resource is associated with only one subscription. Creating a subscription is the first step in adopting Azure. To learn more about Azure, see [Azure fundamental concepts](/azure/cloud-adoption-framework/ready/considerations/fundamental-concepts). You have successfully set up pay-as-you-go billing. ### Step 2: Submit a request to Microsoft to create a Billing Policy for your application -To create a Billing Policy for your application and the pay-as-you-go billing configured in the previous step, you'll need to perform the following steps: +To create a Billing Policy for your application and the pay-as-you-go billing configured in the previous step, you need to perform the following steps: -1. Review the [Microsoft 365 Backup Storage - Third-Party public preview terms of service and conditions](../backup-preview-terms-third-party.md). +1. Review the [Microsoft 365 terms of service](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all). 2. Email *M365Backup3PBilling@microsoft.com* with the following information: We'll reply back to this email once the request is complete. To create a Billing Policy for your application and the pay-as-you-go billing co For details on how to find your Microsoft Entra tenant ID, refer to [How to find your Microsoft Entra tenant ID](/entra/fundamentals/how-to-find-tenant). > [!IMPORTANT]-> Submitting a request to Microsoft indicates that you have accepted the [Microsoft 365 Backup Storage - Third Party public preview terms of service and conditions](../backup-preview-terms-third-party.md). +> Submitting a request to Microsoft indicates that you have accepted the [Microsoft 365 terms of service](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all). > [!WARNING] > The domain of the email address from which you send email to Microsoft must be registered in the same tenant where you configured the pay-as-you-go billing in the previous step. That is, your email domain must be listed in [Microsoft 365 admin center > Domains](https://admin.microsoft.com/Adminportal/?#/Domains). Failure to do so will mean that your request to create a Billing Policy will be rejected. |
| backup | Backup 3P Lifecycle | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/storage/backup-3p-lifecycle.md | Title: Application lifecycle for Microsoft 365 Backup Storage (Preview) + Title: Application lifecycle for Microsoft 365 Backup Storage audience: admin Previously updated : 06/03/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Application lifecycle for Microsoft 365 Backup Storage. -# Application lifecycle for Microsoft 365 Backup Storage (Preview) --> [!NOTE] -> This feature is currently in preview and subject to change. +# Application lifecycle for Microsoft 365 Backup Storage ## Onboard a third-party Microsoft 365 Backup Storage application -Once your Microsoft 365 Backup Storage application is given consent to execute in the Consuming Tenant, to enable it to be the Microsoft 365 Backup Storage Controller in a Consuming Tenant, you'll need to perform the following programmatic tasks (via your application): +Once your Microsoft 365 Backup Storage application is given consent to execute in the Consuming Tenant, to enable it to be the Microsoft 365 Backup Storage Controller in a Consuming Tenant, you need to perform the following programmatic tasks (via your application): 1. [Register your application as a Microsoft 365 Backup Storage Controller](#step-1-register-your-application-as-a-microsoft-365-backup-storage-controller). All other states indicate that there's no active Microsoft 365 Backup Storage Co To activate your application as the Microsoft 365 Backup Storage Controller depends on whether or not there's already an existing Microsoft 365 Backup Storage Controller (either first-party or third-party). -> [!NOTE] -> Activating your application as the Microsoft 365 Backup Storage Controller will notify all of the Consuming Tenant Backup Admins via an email. - #### No existing Microsoft 365 Backup Storage Controller -If there's no existing Microsoft 365 Backup Storage Controller, then you can immediately activate your application as the Controller. To do this, you execute the [serviceApp: activate](/graph/api/serviceapp-activate?view=graph-rest-beta) API: +If there's no existing Microsoft 365 Backup Storage Controller, then you can immediately activate your application as the Controller. To do this step, you execute the [serviceApp: activate](/graph/api/serviceapp-activate?view=graph-rest-beta) API: ```http POST /solutions/backupRestore/serviceApps/{serviceAppId}/activate ``` If your application was successfully activated for a date/time in the future, it ### Existing Microsoft 365 Backup Storage Controller Grace Period -If there was an existing Microsoft 365 Backup Storage Controller when you activated your application, this enforces a Grace Period of between 7 to 30 days (as specified when you activated your application). +If there was an existing Microsoft 365 Backup Storage Controller when you activated your application, this step enforces a Grace Period of between 7 to 30 days (as specified when you activated your application). **During the Grace Period:** - Your application has a state of **pendingActive**. GET /solutions/backupRestore/serviceApps/{serviceAppId} **On completion of the Grace Period:** - Your application has a state of **active**. -> [!NOTE] -> Any state changes made to the Microsoft 365 Backup Storage Controller will notify all of the Consuming Tenant Backup Admins via an email. This includes the following events: -> - Activating a Service App as the Microsoft 365 Backup Storage Controller -> - Canceling the pending change to the Microsoft 365 Backup Storage Controller -> - Deactivating a Service App as the Microsoft 365 Backup Storage Controller -> - Completion of the Grace Period - ### Step 4: Enable your Billing Policy in the Consuming Tenant -Once your application has a status of active, you'll need to enable your Billing Policy in the Consuming Tenant. This step is performed by executing the [backupRestoreRoot: enable](/graph/api/backuprestoreroot-enable?view=graph-rest-beta) API: +Once your application has a status of active, you need to enable your Billing Policy in the Consuming Tenant. This step is performed by executing the [backupRestoreRoot: enable](/graph/api/backuprestoreroot-enable?view=graph-rest-beta) API: ```http POST /solutions/backupRestore/enable ``` -After you have enabled the Billing Policy, your application will be the Microsoft 365 Backup Storage Controller in the Consuming Tenant and will now be able to maintain the Microsoft 365 Backup Service (as per your applicationΓÇÖs oAuth permission scopes). +After you enable the Billing Policy, your application will be the Microsoft 365 Backup Storage Controller in the Consuming Tenant and will now be able to maintain the Microsoft 365 Backup Service (as per your applicationΓÇÖs oAuth permission scopes). > [!NOTE] > You can execute this API multiple times in that it is idempotent. It is recommended to enable the Billing Policy in the Consuming Tenant if, for whatever reason, your Billing Policy changes. For example, if you want to change the Azure Subscription Id or Resource Group. After successfully invoking the API: - Your application has a state of **inactive**. - The application that is currently the Microsoft 365 Backup Storage Controller has a state of **active**. -> [!NOTE] -> Deactivating your application as the Microsoft 365 Backup Storage Controller will notify all of the Consuming Tenant Backup Admins via an email. - #### Deactivating with current state of pendingInactive -Deactivating your application that has a state of **pendingInactive** won't do anything to the pending change of the Microsoft 365 Backup Storage Controller. That is, the pending change continues until the Grace Period is complete. +Deactivating your application that has a state of **pendingInactive** won't do anything to the pending change of the Microsoft 365 Backup Storage Controller. That is, the pending change continues until the Grace Period is complete. #### Deactivating with current state of active DELETE /solutions/backupRestore/serviceApps/{serviceAppId} The outcome of unregistering your application depends on the current state of your application. -> [!NOTE] -> Unregistering your application as the Microsoft 365 Backup Storage Controller will notify all of the Consuming Tenant Backup Admins via an email. - #### Unregistering with current state of inactive Unregistering your application that has a state of **inactive** removes your application as being available to be the Microsoft 365 Backup Storage Controller. After successfully invoking the API: You can't unregister your application that has a state of **pendingInactive** and your request fails with an HTTP 403 error code. -To unregister your application as the Microsoft 365 Backup Storage Controller, you'll need to wait for the Grace Period to be complete (or if the pending change is canceled and your application is reinstated as the Microsoft 365 Backup Storage Controller). +To unregister your application as the Microsoft 365 Backup Storage Controller, you need to wait for the Grace Period to be complete (or if the pending change is canceled and your application is reinstated as the Microsoft 365 Backup Storage Controller). #### Unregistering with current state of active Unregistering your application that has a state of **active** automatically init **On completion of the Grace Period:** - Your application is still no longer available to become the Microsoft 365 Backup Storage Controller (unless it's reregistered).-- If another application is not activated to be the Microsoft 365 Backup Storage Controller, then the offboarding of the Microsoft 365 Backup Service in the Consuming Tenant is initiated.+- If another application isn't activated to be the Microsoft 365 Backup Storage Controller, then the offboarding of the Microsoft 365 Backup Service in the Consuming Tenant is initiated. - Your application continues to be responsible for the Microsoft 365 Backup billing and hence the consumption in the Consuming Tenant until another application is activated to be the Microsoft 365 Backup Storage Controller or until the billing period expires (30-days) as per the offboarding of the Microsoft 365 Backup Service in the Consuming Tenant. > [!WARNING] |
| backup | Backup 3P Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/backup/storage/backup-3p-overview.md | Title: Overview for third-party developers of Microsoft 365 Backup Storage (Preview) + Title: Overview for third-party developers of Microsoft 365 Backup Storage audience: admin Previously updated : 06/03/2024 Last updated : 07/31/2024 ms.localizationpriority: medium description: Overview for third-party developers for Microsoft 365 Backup Storage. -# Overview for third-party developers of Microsoft 365 Backup Storage (Preview) --> [!NOTE] -> This feature is currently in preview and subject to change. +# Overview for third-party developers of Microsoft 365 Backup Storage Third-party developers can create their own applications to manage Microsoft 365 Backup Storage instead of using the out-of-the-box experience provided by Microsoft. Creating an application means that your third-party application becomes the Microsoft 365 Backup Storage **Controller** in the tenant where your application is deployed. +> [!NOTE] +> If you encounter any unanswered product questions in these documents, please refer to the [general Microsoft 365 Backup documentation](../backup-overview.md) for additional insights on features and FAQs, as that experience utilizes the same underlying APIs. + To create and deploy an application, the third-party developers perform the following tasks: -1. Develop your third-party Microsoft 365 Backup Storage application with the required oAuth permissions scopes and [M365 Backup Storage Graph APIs](/graph/api/resources/backuprestoreroot). +1. Develop your third-party Microsoft 365 Backup Storage application with the required oAuth permissions scopes and [Microsoft 365 Backup Storage Graph APIs](/graph/api/resources/backuprestoreroot). -2. Create a Billing Policy for your Microsoft 365 Backup Storage application as per [Set up third-party billing for Microsoft 365 Backup Storage](backup-3p-billing.md). +2. Create a Billing Policy for your Microsoft 365 Backup Storage application as described in [Set up third-party billing for Microsoft 365 Backup Storage](backup-3p-billing.md). 3. Request the Consuming Tenant Backup Admin to consent your Microsoft 365 Backup Storage application to be able to execute in the Consuming Tenant. -4. Enable your application to be the Microsoft 365 Backup Storage Controller in a Consuming Tenant as per [Onboard a third-party Microsoft 365 Backup Storage application](backup-3p-lifecycle.md#onboard-a-third-party-microsoft-365-backup-storage-application) +4. Enable your application to be the Microsoft 365 Backup Storage Controller in a Consuming Tenant as per [Onboard a third-party Microsoft 365 Backup Storage application](backup-3p-lifecycle.md#onboard-a-third-party-microsoft-365-backup-storage-application). > [!NOTE] > This is the standard app registration workflow that is typically invoked by the Consuming Tenant Admin clicking on the following URL: |
| enterprise | Contoso Networking | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/contoso-networking.md | f1.keywords: - NOCSH Previously updated : 09/13/2018 Last updated : 07/29/2024 audience: ITPro +- must-keep description: Understand the Contoso networking infrastructure and how the company uses its SD-WAN technology for optimal networking performance to Microsoft 365 for enterprise cloud services. |
| enterprise | Device Management Roadmap Microsoft 365 | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/device-management-roadmap-microsoft-365.md | keywords: Microsoft 365, Microsoft 365 for enterprise, Microsoft 365 documentati Previously updated : 08/10/2020 Last updated : 07/29/2024 f1.keywords: - NOCSH+- scotvorg +- must-keep ms.localizationpriority: medium description: The roadmap to set up device management for Microsoft 365. Based on your assessment, get started managing your devices with: - [Intune](/microsoft-365/solutions/manage-devices-with-intune-overview) - [Basic Mobility and Security](https://support.microsoft.com/office/set-up-basic-mobility-and-security-dd892318-bc44-4eb1-af00-9db5430be3cd)- + ## Identity and device access recommendations Microsoft provides a set of recommendations for [identity and device access](../security/office-365-security/zero-trust-identity-device-access-policies-overview.md) to ensure a secure and productive workforce. For device access, use the recommendations and settings in these articles: Microsoft provides a set of recommendations for [identity and device access](../ ## How Contoso did device management for Microsoft 365 -For information about how a fictional but representative multi-national business deployed their mobile device management infrastructure with Microsoft 365 cloud services, see [Mobile device management for Contoso](contoso-mdm.md). +For information about how a fictional but representative multi-national business deployed their mobile device management infrastructure with Microsoft 365 cloud services, see [Mobile device management for Contoso](contoso-mdm.md). |
| enterprise | Image Optimization For Sharepoint Online | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/image-optimization-for-sharepoint-online.md | Title: "Image optimization for SharePoint classic publishing sites" Previously updated : 9/18/2019 Last updated : 07/29/2024 audience: Admin +- must-keep f1.keywords: - CSH |
| enterprise | Use Powershell For Email Migration To Microsoft 365 | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/use-powershell-for-email-migration-to-microsoft-365.md | Title: "Use PowerShell to migrate email to Microsoft 365" Previously updated : 07/17/2020 Last updated : 07/29/2024 audience: Admin search.appverid: - scotvorg - Ent_O365+- must-keep f1.keywords: - NOCSH |
| lighthouse | M365 Lighthouse Tenants Page Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/lighthouse/m365-lighthouse-tenants-page-overview.md | description: "For Managed Service Providers (MSPs) using Microsoft 365 Lighthous # Overview of the Tenants page in Microsoft 365 Lighthouse -Microsoft 365 Lighthouse lets you manage customer tenant accounts by selecting **Tenants** in the left navigation pane to open the Tenants page. The Tenants page contains a list of all your customer tenants. You can select a tenant to view detailed information including contact details and deployment status. +Microsoft 365 Lighthouse lets you manage customer tenant accounts by selecting **Tenants** in the left navigation pane to open the **Tenants** page. The **Tenants** page contains a list of all your customer tenants. You can select a tenant to view detailed information including contact details and deployment status. -The Tenants page also includes the following options: +The **Tenants** page also includes the following options: - **Export:** Select to export tenant data to an Excel comma-separated values (.csv) file. - **Manage Tags:** Select to add, edit, or delete a tag. The following table describes the different statuses that you might see in one o | Status | Description | ||--|-| Access needed | You don't have the appropriate GDAP role to view the information. Reach out to an admin in your partner tenant who can assign you the appropriate GDAP role to view data on the Tenants page.<br><br>To see which GDAP roles provide access to Microsoft Secure Score, see [Microsoft Secure Score: Microsoft Entra global roles permissions](/defender-xdr/microsoft-secure-score#microsoft-entra-global-roles-permissions).<br><br>To see which GDAP roles provide access to apps and services usage, see [Microsoft 365 Reports in the admin center: Who can see reports](../admin/activity-reports/activity-reports.md#who-can-see-reports). | +| Access needed | You don't have the appropriate granular delegated admin privileges (GDAP) to view the information. Reach out to an admin in your partner tenant who can assign you the appropriate GDAP role to view data on the Tenants page.<br><br>To see which GDAP roles provide access to Microsoft Secure Score, see [Microsoft Secure Score: Microsoft Entra global roles permissions](/defender-xdr/microsoft-secure-score#microsoft-entra-global-roles-permissions).<br><br>To see which GDAP roles provide access to apps and services usage, see [Microsoft 365 Reports in the admin center: Who can see reports](../admin/activity-reports/activity-reports.md#who-can-see-reports). | | Error | An error occurred during the onboarding process for this customer tenant and we're working on a fix. If this error persists for more than 24 hours, contact Support. | | Limited | This customer tenant has access to only a limited set of experiences in Lighthouse, including GDAP setup and management, user search, user details, tenant tagging, and service health.<br><br>Select the tenant name to see a detailed status of Lighthouse management requirements. For more information, see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md).| | Managed | This customer tenant can be actively managed and monitored in Lighthouse for users and devices with required licenses. | To view detailed customer tenant information, select a tenant from the list of t :::image type="content" source="../media/m365-lighthouse-tenants-page-overview/tenant-details-page.png" alt-text="Screenshot of the Tenant details page." lightbox="../media/m365-lighthouse-tenants-page-overview/tenant-details-page.png"::: -### Overview tab --On the Overview tab, you can view customer tenant overview information, contact information, and Microsoft 365 service usage. +### Metadata area -#### Tenant overview section +The metadata area at the top of the page provides basic information about the customer tenant from its Microsoft 365 account. -The Tenant overview section provides information about the customer tenant from its Microsoft 365 account. +| Tenant information | Description | +|--|--| +| Tenant ID | The organization's tenant ID. | +| Total enabled users | The number of users assigned in the customer tenant. | +| Total devices | The number of devices enrolled in the customer tenant and managed through Microsoft Intune. Select **View devices** to open the **Devices** page to see a list of devices and device compliance insights for the tenant. | +| Lighthouse management | The management status of the customer tenant in Lighthouse: **Managed**, **Limited**, **Removed by partner**, or **Removed by customer**. Select **View details** to open the Lighthouse management details pane for the tenant. | +| Your permissions | The number of roles assigned to you in the customer tenant. Roles determine which tasks you can complete for customers and what data you can view. Select **View roles** to open the **Roles** page to see which roles are assigned to you in the tenant. | +| Tags | The tags assigned to the customer tenant in Lighthouse. | -| Tenant information | Description| -|--|| -| Tenant Domain |The organization's domain.| -| Tenant ID|The organization's tenant ID.| -| Lighthouse management | The management status of the customer tenant in Lighthouse (Managed, Limited, Removed by partner, or Removed by customer) | -| Delegated access | The type of admin privileges the customer granted your organization: DAP, GDAP, or None. | -| Your permissions | The roles assigned to you in the tenant. Roles determine which tasks you can complete for customers, and what data you can view.| -| Total users |The number of users assigned in the tenant. You can select this number to open the Users page for that tenant.| -| Total devices|The number of devices enrolled in the tenant. You can select this number to open the Devices page for that tenant.| +### Overview tab -#### Scores section +On the **Overview** tab, you can view a summary of key insights, customer information, Secure Score, Exposure Score, and adoption insights. -The Scores section shows you the customer tenant's Secure Score, Exposure Score, and adoption insights at a glance. Select any of the links in this section to view detailed information about the scores and insights. +#### Summary -To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md), [Exposure score in Defender Vulnerability Management](../security/defender-vulnerability-management/tvm-exposure-score.md), and [Microsoft Adoption Score](../admin/adoption/adoption-score.md). +The **Summary** section provides a high-level summary of key insights for the customer tenant around baseline compliance, security and adoption posture, critical alerts, and information about the customer tenant's subscriptions and mailbox storage status. -#### Customer overview section +#### Customer information -The Customer overview section provides the following information for key contacts within the tenants you manage: +The **Customer information** section provides a place to record basic customer information, such as service plans the customer is on and notes about the customer to ensure everyone in your organization is on the same page about the latest engagement with the customer. -- Headquarter location-- Industry-- Customer domain-- Company website+If your organization limits how often and who can reach out directly to customers, you can list customer engagement managers on this tab so others in your organization know who's authorized to contact the customer. -#### Customer contacts section +Lastly, you can use this tab to store customer contact information, including name, title, phone, email, and notes about the contact. -The Customer contacts section provides the following information for key contacts within the tenants you manage: +#### Secure Score -- Name-- Title-- Phone-- Email-- Notes+The **Secure Score** section provides Microsoft Secure Score information about the customer organization to help you assess their security posture. Microsoft Secure Score is a measurement of an organization's security posture. The higher the score, the better protected the organization is from threats. Microsoft provides recommendations for how to increase an organization's Secure Score, which improves its security posture. To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md). -The **Notes** column shows information for the tenant, such as engagement preferences, location, time zone, and details about their role within the organization. +#### Adoption insights -To edit details, add notes, or delete an existing contact, select the contact name from the list. In the **Edit contact** pane, edit or delete the contact. To add another contact, select **+Add contact**. +The **Adoption insights** section provides a subset of the Microsoft Adoption Score insights for the customer organization. Adoption insights tell you how the customer organization uses Microsoft products and features so you can help them improve their productivity and use the products more efficiently. To learn more, see [Microsoft Adoption Score](../admin/adoption/adoption-score.md). -#### Deployment progress and User progress sections +### Action items tab -These sections provide a graphical view of the deployment and user progress. +The **Action items** tab displays a summary of key issues in the customer tenant that require attention. -#### Microsoft 365 services usage section +#### Devices -Lighthouse provides insights into Microsoft 365 services usage, including how many users within a customer tenant are licensed and actively using each service. The **Active users & devices** column indicates the number of users or devices that signed in to the service at least once in the past 28 days. The **Change in activity** column indicates change in active users and devices since last month. +The **Devices** section provides a summary of the number of customer device issues that require attention across the tenant, including compliance, threat protection, device health, Windows 365 issues, and Windows event logs. This section also provides links to the associated pages where you can view details about the issues. -The **Microsoft 365 services usage** section contains two subsections: +#### Users and email -- **Microsoft 365 Lighthouse-enabled -- **Additional Microsoft 365 +The **Users and email** section helps you to quickly assess issues related to risky users, multifactor authentication (MFA), and quarantined messages. ### Deployment plan tab -The Deployment plans tab provides status on a customer tenant's deployment plan. The deployment steps in the list are based on the baseline applied to the tenant. To see deployment step details, select a deployment step from the list. +The **Deployment plan** tab provides status on a customer tenant's deployment plan. The deployment steps in the list are based on the baseline applied to the tenant. To see deployment step details, select a deployment step from the list. -The Deployment plan tab also includes the following options: +The **Deployment plan** tab also includes the following options: - **Refresh:** Select to retrieve the most current deployment step data. - **Search:** Enter keywords to quickly locate a specific deployment step in the list. -### Deployment progress by user tab +### Users tab ++The **Users** tab provides data relevant to users in the customer tenant. ++#### Summary -This tab provides deployment status of each user for tasks that support user progress reporting. You can select a user to see more details. Deployment progress is only available for licensed tasks. User progress is only reported for tasks that are **Compliant**, **Not compliant**, or **Dismissed**. +The **Summary** section provides an overview of insights related to users in the customer tenant, specifically around deployment task progress by user and the mailbox storage status of each user. -The Deployment progress by user tab also includes the following options: +#### Deployment progress ++The **Deployment progress** section provides the deployment status of each user for tasks that support user progress reporting. Select any user to see more details. Deployment progress is only available for licensed tasks. User progress is only reported for tasks that are **Compliant**, **Not compliant**, or **Dismissed**. ++The **Deployment progress** section also includes the following options: - **Export:** Select to export tenant data to an Excel comma-separated values (.csv) file. - **Refresh:** Select to retrieve the most current deployment step data. - **Search:** Enter keywords to quickly locate a specific deployment step in the list. -### Scores tab +#### Mailbox usage ++The **Mailbox usage** section provides details on the storage status for user mailboxes and shared mailboxes. This section also includes filters to help you manage the list of mailboxes, including the ability to identify the archive status of a mailbox. ++### Product details and usage tab ++The **Product details and usage** tab contains all data related to subscriptions and license usage. ++#### Apps and services usage ++The **Apps and services usage** section provides insights into Microsoft 365 services usage, including how many users within a customer tenant are licensed and actively using each service. ++This section includes information about the following ++- **Services managed in Microsoft 365 Lighthouse:** These services can be managed within the Lighthouse portal. +- **Services managed in the Microsoft 365 admin center:** These services are included in the Microsoft 365 subscription but can't be managed within the Lighthouse portal. ++Within the lists of services, the **Active users & devices** column indicates the number of users or devices that signed in to the service at least once in the past 28 days. The **Change in activity** column indicates a change in active users and devices since last month. ++#### Subscriptions list ++The **Subscriptions list** section shows all the subscriptions your organization sold to the customer through the Cloud Solution Provider (CSP) channel. The product information is limited to subscriptions bought through the New Commerce Experience (NCE) and excludes Azure subscriptions. ++The following information is captured for subscriptions: ++| Subscription information | Description | +|--|| +| Product name | The name of the subscription. | +| Subscription ID | The ID number of the subscription. | +| State | The state of the subscription: **Active**, **Expired**, or **In grace** (meaning it's in a grace period after expiring and before it's canceled). | +| End date | The date the subscription ends. | +| Type | Whether the subscription is **Paid** or **Trial**. | +| Recurring billing | Whether the customer enabled the subscription for autorenew at the end of the subscription period. | +| Paid licenses | The number of paid licenses on the subscription. | +| Billing frequency | The billing cycle for the subscription. | +| Purchase channel | The channel through which the subscription was purchased. | ++### Scripts tab -This tab provides Microsoft Secure Score information and adoption insights. Microsoft Secure Score is a measurement of an organization's security posture. The higher the score, the better protected the organization is from threats. Microsoft provides recommendations for how to increase an organization's secure score, which improves its security posture. To learn more, see [Microsoft Secure Score](../security/defender/microsoft-secure-score.md). +The **Scripts** tab lets you create and deploy PowerShell scripts and check script results for Intune-managed devices within the customer tenant. -Adoption insights are a subset of the Microsoft Adoption Score. Adoption insights tell you how the organization uses Microsoft products and features so you can help them improve their productivity and use the products more efficiently. To learn more, see [Microsoft Adoption Score](../admin/adoption/adoption-score.md). +For more information about creating and deploying PowerShell scripts, see [Deploy a PowerShell script from Microsoft 365 Lighthouse](m365-lighthouse-deploy-powershell-script.md). ## Related content Adoption insights are a subset of the Microsoft Adoption Score. Adoption insight [Microsoft 365 Lighthouse FAQ](m365-lighthouse-faq.yml) (article)\ [Manage your tenant list in Microsoft 365 Lighthouse](m365-lighthouse-manage-tenant-list.md) (article)\ [Overview of using Microsoft 365 Lighthouse baselines to deploy standard tenant configurations](m365-lighthouse-deploy-standard-tenant-configurations-overview.md) (article)\-[Microsoft Secure Score](../security/defender/microsoft-secure-score.md) (article) +[Microsoft Secure Score](../security/defender/microsoft-secure-score.md) (article)\ +[Microsoft Adoption Score](../admin/adoption/adoption-score.md) (article) |
| lighthouse | M365 Lighthouse Whats New | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/lighthouse/m365-lighthouse-whats-new.md | You can now view usage data for Microsoft 365 services from within Microsoft 365 These insights can help inform your customer engagements and deliver more value to your customers by empowering you to help them understand which services their users actively use and where there may be opportunities to enhance their security or productivity. -For more information, see [Overview of the Tenants page in Microsoft 365 Lighthouse: Microsoft 365 services usage section](m365-lighthouse-tenants-page-overview.md#microsoft-365-services-usage-section). +For more information, see [Overview of the Tenants page in Microsoft 365 Lighthouse: Apps and services usage](m365-lighthouse-tenants-page-overview.md#apps-and-services-usage). <a name='exchange-online-protection-and-microsoft-365-defender-for-office-365-default-baseline-step'></a> |