Cohesity Alta SaaS Protection Administrator's Guide

Last Published:
Product(s): Veritas Alta SaaS Protection (3.2.1)
  1. Introduction to Cohesity Alta SaaS Protection
    1.  
      About Cohesity Alta SaaS Protection
    2.  
      Features of Cohesity Alta SaaS Protection
    3.  
      Architecture of Cohesity Alta SaaS Protection
    4.  
      Operational workflow
    5.  
      Extra Data Backup (EDB)
  2. API permissions
    1.  
      API permissions for Microsoft 365 workloads
    2.  
      API permissions for Gmail and Google Drive
    3.  
      System and API permissions for Salesforce
    4.  
      API permissions for Entra ID
    5.  
      App permissions of Web App
  3. Administrator portal (Web UI)
    1.  
      About the Administration portal
    2.  
      Configure the Administration portal
    3.  
      View upgrade history
  4. Cohesity Alta SaaS Protection Copilot (AI chatbot)
    1.  
      Cohesity Alta SaaS Protection Copilot (AI chatbot)
  5. Manage users and roles
    1.  
      Role-based access control
    2. Permissions tab
      1.  
        Users and groups page
      2.  
        Roles page
      3.  
        Unrecognized users page
      4.  
        Settings page
  6. What is a connector?
    1.  
      What is a connector?
    2.  
      Supported SaaS workloads and backup capabilities
    3.  
      Workflow to protect data using Cohesity Alta SaaS Protection
    4.  
      Know your subscription details
    5.  
      About transient errors
    6.  
      Overview of adding connectors
    7.  
      Configure General settings
    8.  
      Configure Capture scope
    9.  
      Configure User filter
    10.  
      Configure Group filter
    11.  
      Configure Folder filter
    12. Configure credentials
      1.  
        Assign Microsoft 365 apps registration
      2.  
        Microsoft 365 apps registration status
      3.  
        Manually approve Microsoft 365 apps registration
      4.  
        Approve Microsoft 365 apps using the App Consent Grant utility
      5.  
        Microsoft 365 apps recovery
    13.  
      Configure Custom backup policy and guidelines
    14.  
      Configure Delete policy for SharePoint Online and guidelines
    15.  
      Configure Stubbing policy
    16.  
      Guidelines to configure Stubbing policy for SharePoint Online
    17.  
      Schedule a backup
    18.  
      Configure email addresses to get notifications
    19.  
      Review configuration and edit/save/initiate backup
    20.  
      Connectors page
    21.  
      Connector status
    22.  
      Edit connector configuration
    23.  
      Delete connectors
  7. Pre-requisites to setup protection for M365
    1.  
      Pre-requisites to setup protection for M365
  8. Protect Microsoft 365 Multi-Geo tenant
    1.  
      Considerations for adding SharePoint/Teams Sites/OneDrive connectors for Microsoft 365 Multi-Geo tenant
  9. Protect Exchange Online data
    1.  
      Backup and restore support for Exchange Online
    2. Setting up Exchange Online data protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for Exchange connectors
  10. Protect SharePoint sites and data
    1.  
      Backup and restore support for SharePoint Online
    2.  
      Supported and unsupported SharePoint Settings and Types for backup and restore
    3.  
      Supported Sites and List templates for backup and restore
    4.  
      Supported SharePoint permission objects for backup and restore
    5. Setting up SharePoint Online protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for SharePoint connectors
    6.  
      Configure additional backup options for SharePoint/Teams site/ OneDrive connectors
    7.  
      End-user SharePoint data access in Cohesity Alta SaaS Protection
    8.  
      Run the Delete and Stubbing policies to the SharePoint Online environment
    9.  
      Backup limitations for SharePoint Online
  11. Protect Teams sites
    1.  
      Backup and restore support for Teams Sites
    2. Setting up Teams Site protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for Team site collections connectors
    3.  
      Backup limitations for Teams site collections
  12. Protect OneDrive data
    1.  
      Backup and restore support for OneDrive
    2. Setting up OneDrive protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for OneDrive connectors
  13. Protect Teams chats
    1.  
      Backup and restore support for Teams chat
    2. Setting up Teams chat protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for Teams chat connectors
    3.  
      Backup limitations for Teams chat
  14. Protect GoogleDrive data
    1.  
      Backup and restore support for GoogleDrive
    2.  
      Prerequisites to add Google Drive connectors
    3. Setting up Google Drive protection with Cohesity Alta SaaS Protection
      1.  
        Configure the Capture scope for Google Drive connectors to backup users data in your Google Drive environment
    4.  
      Backup limitations for Google Drive
    5.  
      FAQs
  15. Protect Gmail data
    1.  
      Backup and restore support for Gmail
    2.  
      Prerequisites to add Gmail connectors
    3. Setting up Gmail protection with Cohesity Alta SaaS Protection
      1.  
        Configure capture scope for Gmail connectors
  16. Protect Audit logs
    1.  
      Add Audit log connectors
    2.  
      Audit log connector limitations
  17. Protect Salesforce data and metada
    1.  
      About Salesforce protection
    2.  
      Key considerations and prerequisites for adding Salesforce connectors
    3.  
      Add Salesforce connectors
    4.  
      Limitations of Salesforce connectors
    5.  
      Salesforce Objects not supported for backup
  18. Protect Entra ID objects
    1.  
      Backup and restore support for Entra ID
    2.  
      Setting up Entra ID protection with Cohesity Alta SaaS Protection
    3.  
      Add Entra ID (Azure AD) connectors
    4.  
      Backup and restore limitations for Entra ID
  19. Protect Box data
    1.  
      Backup and restore support for Box
    2.  
      Prerequisites for Box connectors configuration
    3.  
      Setting up Box protection with Cohesity Alta SaaS Protection
    4.  
      Configure capture scope for Box connector
    5.  
      Backup limitations for Box
  20. Protect Slack data
    1.  
      Add Slack connectors
  21. Protect Email/Message data
    1.  
      Prerequisite for Email/message connector
    2.  
      Add Email/Messages file
  22. Configure Retention policies
    1.  
      About WORM policies
    2.  
      Ingestion WORM policies page
    3.  
      Add/edit Ingestion WORM retention policies and guidelines
    4.  
      Add/edit At-Rest WORM retention policies
    5.  
      Add/edit Deletion policies
    6.  
      View deletion history
    7.  
      How to edit the policy evaluation interval?
    8.  
      How to add a Location filter?
    9.  
      How to add a filter?
  23. Perform backups
    1.  
      Perform on-demand/ad-hoc backup
    2.  
      Backup dashboard
    3.  
      Video tutorial for connector troubleshooting
    4. View backup events
      1.  
        About Event suppression
      2.  
        Create event suppression rules
    5.  
      Viewing backup tasks details
  24. View and share backed-up data
    1.  
      Browse backed-up data
    2.  
      Share data
    3.  
      Remove data sharing
  25. Analytics
    1.  
      About analytics
    2.  
      Analytics page and refresh behavior
    3.  
      Aggregation buckets
    4.  
      Gain insights into storage utilization
    5.  
      Gain insights into storage utilization for Entra ID and Salesforce connectors
    6.  
      Gain insights into blocked activities, most active users, and more
    7.  
      Gain insights into data volume (size and item count) on legal hold
    8.  
      Gain insights into data volume (size and item count) saved in different Enhanced cases
    9.  
      Gain insights into data volume (size and count) under different policies
    10.  
      Gain insights into data volume (size and item count) under different Tags
    11.  
      Gain insights into data volume (size and item count) under different Tags behaviors
    12.  
      Gain insights into storage savings after deduplication and compression
    13.  
      Gain insights into data ingestion trends
  26. Perform restores using Administration portal
    1.  
      About restore
    2.  
      Prerequisites for restore
    3.  
      Restore Exchange Online mailboxes
    4. Restore SharePoint/OneDrive/Teams Sites and data
      1.  
        Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      2.  
        Restore limitations for SharePoint Online
    5. Restore Teams chat messages and Teams channel conversations
      1.  
        Restore limitations for Teams chat
    6.  
      Restore O365 audit logs
    7. Restore Box data
      1.  
        Restore limitations for Box
    8. Restore Google Drive data
      1.  
        Overwrite restore behavior for Box/Google Drive data
    9.  
      Restore Gmail data
    10. About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
      1.  
        Guidelines for Schema changes in Salesforce organization to prevent restore failures
      2.  
        Restore Standard and Custom objects (Structured data restore)
      3.  
        Custom Object restore - post processing steps
      4.  
        Restore specific Records (Structured data) using Query filters
      5.  
        Restore Salesforce CRM Content (Unstructured data restore)
      6.  
        Restore Salesforce files/documents in Public/Shared libraries (Unstructured data restore)
      7.  
        Limitations of Salesforce Data restore
      8.  
        Salesforce Objects not supported for restore
      9.  
        Key considerations for Salesforce Metadata restore
      10.  
        Restore Salesforce Metadata
      11.  
        Limitations of Salesforce Metadata backup and restore
    11. About Entra ID (Azure AD) objects and records restore
      1.  
        Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restore an Entra ID object
      4.  
        Restore specific records within Entra ID objects
    12.  
      Restore Slack data
    13.  
      Restore data to File server
    14.  
      Set default restore point
    15.  
      Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
    16.  
      Configure email addresses for notifications
    17.  
      Downloading an item
  27. Restore dashboard
    1.  
      About Restore dashboard
    2.  
      Restore job statuses
    3.  
      How to cancel a restore job?
    4.  
      View the restore events
  28. Install services and utilities
    1.  
      About services and utilities
    2.  
      Pre-requisites to download and install services and utilities
    3.  
      Downloading services and utilities
    4.  
      Where to install the services and utilities
    5.  
      Installing or upgrading services and utilities
    6.  
      Configuring service accounts for services and utilities
    7. About the Apps Consent Grant Utility
      1.  
        Downloading the Apps Consent Grant Utility
      2.  
        Installing or upgrading the Apps Consent Grant Utility
      3.  
        Post-installation activities for the Apps Consent Grant Utility
  29. Discovery
    1.  
      About eDiscovery/searches
    2.  
      Add search templates
    3.  
      Add Discovery cases
    4.  
      Perform ad hoc search and add data to Discovery cases
    5.  
      View data in Discovery cases
    6.  
      Edit Discovery cases
    7.  
      DeleteDiscovery cases
    8.  
      Assign Discovery cases to users
  30. Configure Tagging polices
    1.  
      About the Tagging policy
    2.  
      Add Tags
    3.  
      Add/edit Tagging policies
    4. Adding regular expressions
      1.  
        RegEx and query examples for PII detection
  31. Configure Tiering policy
    1. About the Tiering policy
      1.  
        Storage tiering and full-text search
      2.  
        User experience on storage tiering
      3.  
        Priority for storage Tiering
    2.  
      Add/edit Tiering policies
  32. Auditing
    1.  
      Auditing
  33. Manage Stors (Storages)
    1.  
      Viewing Stors (Storages)
    2.  
      Requesting a new Stor
    3.  
      General tab
    4.  
      Version control settings
    5.  
      Metadata tab
    6.  
      Statistical policies tab
    7.  
      Location-Mapping tab
    8.  
      Backup tab
    9.  
      Custodian Groups tab
    10.  
      Advanced tab
    11.  
      Analytics tab

Restore Exchange Online mailboxes

With Cohesity Alta SaaS Protection, you can restore the user's entire mailbox, a specific folder within the mailbox, or an individual mailbox item.

Key features:
  • Flexible restore

    Restore data back to the original user's mailbox or to another user's mailbox.

    Restore data to Group or Teams mailboxes.

  • Download capability:

    You can also download an item to the required location. See Downloading an item.

  • Duplicate suppression

    Suppress duplicate items during restore to avoid multiple instances of the same content.

Note:

When you export large amounts of data directly into a mailbox, ensure that the amount of data does not exceed any mailbox quotas.

To restore Exchange Online data using the Export utility, refer to the following knowledge base article:

How to use the Export Utility (For Admins) to Restore a Mailbox, Folder, or Messages to Exchange

Procedure to perform the restore of Exchange Online data to the Exchange Online environment:
  1. Access the Administration portal.
  2. Click Content.
  3. On the Content page, do the following:
    • From the upper-left dropdown list, select the Stor that hold the data that you want to restore.

    • From the dropdown list next to the selected Stor, do any of the following:

      • To display all data in the selected Stor, select All content.

      • To view specific data within the Discovery cases, select the required Discovery case.

      The connectors are displayed on the left pane. You can enter the name of the specific connector in the Filter by name field to search for a specific connector.

    • On the left pane, select the connector name.

    • On the right pane, do any of the following:

      • To restore the user's entire mailbox, select the check box of the folder displayed.

      • To restore any specific mailbox item, click the folder, click Active Mailbox > browse for the required folders. For example, Inbox > select the check box of the required folders.

    • Click Restore.

  4. On the Restore page, do the following:
    • From the Restore type dropdown list, select Email.

    • From the Destination dropdown list, select the restore (export) service that is configured for your tenant.

    • Do any of the following applicable to your scenarios:

      • To restore data to the same user's mailbox, do the following:

        • Click User mailbox.

          The email address of the user is populated in the Mailbox email address field.

      • To restore data to another user's mailbox, do the following:

        • Click User mailbox.

        • In the Mailbox email address field, enter the user's email address where you want to restore this mailbox data.

      • To restore data to the group or Teams mailbox, do the following:

        • Click Groups/Teams mailbox.

        • In the Mailbox email address field, enter the email address of the group where you want to restore this item.

    • Do any of the following applicable to your scenario:

      • To merge the data into the user's mailbox, enable the Merge active mailbox option.

      • To restore data to another location, disable the Merge active mailbox option and click Browse. On the Restore page, select the required target location for restore.

    • Configure the following settings as required:

      • Suppress duplicates (best effort) check box:

        • If selected: The duplicate items are suppressed from the restore. That is no duplicate items will be restored.

        • If cleared: The duplicate items are restored at the destination.

      • Only restore regular sent messages check box:

        • If selected: The supported ItemClasses for restore, if the Only restore regular sent messages check box is selected:

          • ipm.note

          • ipm.post

        • If cleared: The supported ItemClasses for restore, if the Only restore regular sent messages check box is cleared:

          • ipm.distlist

          • (Only the contact groups that were captured as JSON (post 2.9.387) can be restored.)

          • ipm.post

          • ipm.contact

          • ipm.stickynote

          • ipm.task

          • ipm.appointment

          • ipm.skypeteams.message

          • ipm.appointment.microsoft.onlinebooking

            (Limited support. Items get restored as Appointments and not as Bookings.)

          • ipm.schedule.meeting.resp.pos

          • ipm.schedule.meeting.resp.neg

          • ipm.schedule.meeting.resp.tent

          • ipm.schedule.meeting.request

          • ipm.schedule.meeting.canceled

          • ipm.schedule.meeting.notification.forward

          • ipm.note.groupmailbox.welcomeemail

          • ipm.note.enterprisevault.shortcut

          • IPM.Note.SMIME.MultipartSigned

          Unsupported Item Classes

          The restore is not supported for the following ItemClasses in regular folders, even if the Restore regular sent messages check box is selected:

          • ipm.appointment

          • ipm.contact

          • ipm.distlist

          • ipm.task

        However, if you want to restore the ItemClasses not listed in the supported list, you can initiate the restore using Export utility and clear the Suppress Unsupported Item Classes check box.

        Important: Clearing Suppress Unsupported Item Classes check box option may result in an unexpected behavior for restoring a few unsupported ItemClasses.

      • Overwrite items checkbox:

        • If selected: The items already at the destination are replaced with the copy in the backup.

        • If cleared: The items already at the destination are not replaced with the copy in the backup. Only the changes are merged.

          The following restore behavior is observed for the Exchange contacts (with or without Name) and tasks (with or without Name):

          Overwrite item check box

          Same item available at destination

          Result

          Selected

          Yes

          A duplicate item is created at the destination with a different unique ID.

          Selected

          No

          The item from the backup is restored on the destination with a unique ID.

          Not selected

          Yes

          No duplicate entry is created.

          Not selected

          No

          The item from the backup is restored on the destination with a unique ID.

    • Do any of the following:

      • To restore all items in the selected backup location, click Restore all.

      • To restore the items from a specific point in time within the selected backup location, click Point-in-time and then set the date, time, and time zone.

      • To restore the items that are backed up within a specific range, click Specific Range and specify criteria such as the last 7 days, last 7 hours, and so on.

    • Enter the email addresses of the users to send a notification on restore completion. Use a semicolon to add multiple email addresses. After all the configurations are completed, click Restore.

    • Click Restore.

  5. Navigate to the destination to confirm that the restore is completed successfully.

    You can go to the See About Restore dashboard. to see the status of the restore.