Creating a new Microsoft Office 365 service account
When you create your new Microsoft Office 365 account, this account must have global administration permissions with a valid and assigned Microsoft Office 365 license.
This is not the only service account used to manage SaaS Backup for Microsoft Office 365. The following image points out the different service account types with descriptions below. Account Microsoft Service
Service account descriptions
2. A zzzCCconfigacct is automatically created as a service account to discover Office 365 Groups.
3. An additional service account can be added to enhance performance of backup and restore operations.
Creating a new MS Office 365 service account with global administrator permissions
During signup, create an account with global permissions and a valid Microsoft Office 365 license. You can remove the global administration permissions and the license from this account after you complete signup.
Log in to your Microsoft 365 Management portal using an account with administrative privileges.
Click Users

First name
Last name
Display name
User name
The user name is the name of the service account.
Exchange Administrator
SharePoint Administrator
Application Impersonation Role
This is especially important if you restrict the individual licenses for the Global administrator role.
ZZZ Config account
As part of your SaaS Backup subscription, a new account is created with ZZZ CC Config [GUID].
This auto-created account is used for discovering Shared/Archive mailboxes and private groups. It should have Exchange and SharePoint permissions (customized administrator in O365). It is recommended that you exclude this account from MFA policies.
Creating additional service accounts
Service Accounts can be added in SaaS Backup for Microsoft Office 365 to improve the backup performance for a customer. A service account is a Microsoft Office 365 user account without a license; it is used for backup and restore operations.
This type of account requires 3 permissions:
Exchange administrator
SharePoint administrator
Application impersonation role


Comments
Post a Comment