Creating a new Microsoft Office 365 service account

 When you create your new Microsoft Office 365 account, this account must have global administration permissions with a valid and assigned Microsoft Office 365 license.

This is not the only service account used to manage SaaS Backup for Microsoft Office 365. The following image points out the different service account types with descriptions below. Account Microsoft Service

Service account descriptions


1. The account used to sign up for SaaS Backup; it requires global administration permissions with a valid Microsoft Office 365 license during signup. It can be used for backup and restore operations.

2.  A zzzCCconfigacct is automatically created as a service account to discover Office 365 Groups.

 3. An additional service account can be added to enhance performance of backup and restore operations.

Creating a new MS Office 365 service account with global administrator permissions

During signup, create an account with global permissions and a valid Microsoft Office 365 license. You can remove the global administration permissions and the license from this account after you complete signup.

Steps
  1. Log in to your Microsoft 365 Management portal using an account with administrative privileges.

  2. Click Users

 3. Select Active users, and then click Add a user.



4.  Enter the details of the new service account
  • First name

  • Last name

  • Display name

  • User name
    The user name is the name of the service account.


5.  Expand 
Roles, select Global administrator as the role, and then click Add.



6.  Log in to your Microsoft 365 Management Portal with the new account to activate it.

7.  After signup, ensure this service account maintains three permissions:

  • Exchange Administrator

  • SharePoint Administrator

  • Application Impersonation Role

    This is especially important if you restrict the individual licenses for the Global administrator role.

ZZZ Config account

As part of your SaaS Backup subscription, a new account is created with ZZZ CC Config [GUID].

This auto-created account is used for discovering Shared/Archive mailboxes and private groups. It should have Exchange and SharePoint permissions (customized administrator in O365). It is recommended that you exclude this account from MFA policies.

Creating additional service accounts

Service Accounts can be added in SaaS Backup for Microsoft Office 365 to improve the backup performance for a customer. A service account is a Microsoft Office 365 user account without a license; it is used for backup and restore operations.

This type of account requires 3 permissions:

  • Exchange administrator

  • SharePoint administrator

  • Application impersonation role     

To add an additional service account, the service account must already exist in your Microsoft Office 365 environment. If you do not have an existing account, then create one.


              Call 1-856-514-8666 for help and support of Account Microsoft Service.

Comments

Popular posts from this blog

How to change your Microsoft subscription payment method and options

How to manage your Microsoft billing accounts?

MSN Premium Targets Fast Net Users