Please enter search query.
Search <product_name> all support & community content...
Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Article: 100061359
Last Published: 2025-09-03
Ratings: 0 0
Product(s): Alta SaaS Protection
Description
- The user who is initiating restore should at least have the Access All Items permission in Cohesity Alta SaaS Protection (CASP), e.g. Retrieval Service User.
- In addition to the permissions in CASP, the following is needed on the destination Microsoft Entra ID.
- The user who initiates the restore job must be present in the destination Microsoft Entra ID with the same email as available in CASP.
- The user who initiates the restore must have the following permissions in the destination Microsoft Entra ID:
- Global Administrator if restore is attempted for Users or Groups.
- Global Administrator or Application Administrator If restore is attempted for Application Registration or Enterprise Applications.
The enterprise application which is linked to the export location used in the restore jobs must also be added to the Global Administrator role. To add the enterprise application to the Global Administrator role, perform the following steps:
- Navigate to https://entra.microsoft.com/ and login with a user having a Global Administrator role.
- Next, navigate to Identity → Roles & admins → Roles & admins.
- Search for the Global Administrator role.
- Open the Global Administrator role, then go to the Assignments page and click on the Add assignments button.
- In the Add assignments dialog box, search for the name of the application registration used to create the export location. (Note: By default, the Enterprise applications tab is not visible under Add assignments unless it is searched for).
- Select and add the enterprise application to complete the role assignment.





