Important Update: Cohesity Products Documentation

All Cohesity product documentation are now managed via the Cohesity Docs Portal: https://docs.cohesity.com/HomePage/Content/home.htm. Some documentation available here may not reflect the latest information or may no longer be accessible.

Cohesity Alta SaaS Protection Administrator's Guide

Last Published:
Product(s): Alta SaaS Protection (3.10.1)
  1. Introduction to Veritas Alta SaaS Protection
    1.  
      About Veritas Alta SaaS Protection
    2.  
      Features of Veritas Alta SaaS Protection
    3.  
      Architecture of Veritas Alta SaaS Protection
    4.  
      Operational workflow
    5.  
      Extra Data Backup (EDB)
  2. Veritas Alta SaaS Protection Copilot (AI chatbot)
    1.  
      Veritas Alta SaaS Protection Copilot (AI chatbot)
  3. Veritas Alta SaaS Protection Administrator portal (Web UI)
    1.  
      About Veritas Alta SaaS Protection Administration portal
    2.  
      Configure Veritas Alta SaaS Protection Administration portal
    3.  
      View upgrade history
  4. Supported SaaS workloads
    1.  
      Supported SaaS workloads and backup capabilities
  5. Workflow to protect data using Veritas Alta SaaS Protection
    1.  
      Workflow to protect data using Veritas Alta SaaS Protection
    2.  
      Know your subscription details
  6. Manage users and roles
    1.  
      Role-based access control
    2. Permissions tab
      1.  
        Users and groups page
      2.  
        Roles page
      3.  
        Unrecognized users page
      4.  
        Settings page
  7. API permissions
    1.  
      API permissions for Microsoft 365 workloads
    2.  
      API permissions for Gmail and Google Drive
    3.  
      System and API permissions for Salesforce
    4.  
      API permissions for Entra ID
    5.  
      App permissions of Web App
  8. What is a connector?
    1.  
      What is a connector?
    2.  
      About transient errors
    3.  
      Overview of adding connectors
    4.  
      Configure General settings
    5.  
      Configure Capture scope
    6.  
      Configure User filter
    7.  
      Configure Group filter
    8.  
      Configure Folder filter
    9. Configure credentials
      1.  
        Assign Microsoft 365 apps registration
      2.  
        Microsoft 365 apps registration status
      3.  
        Manually approve Microsoft 365 apps registration
      4.  
        Approve Microsoft 365 apps using the App Consent Grant utility
      5.  
        Microsoft 365 apps recovery
    10.  
      Configure Custom backup policy and guidelines
    11.  
      Configure Delete policy for SharePoint Online and guidelines
    12.  
      Configure Stubbing policy
    13.  
      Guidelines to configure Stubbing policy for SharePoint Online
    14.  
      Schedule a backup
    15.  
      Configure email addresses to get notifications
    16.  
      Review configuration and edit/save/initiate backup
    17.  
      Connectors page
    18.  
      Connector status
    19.  
      Edit connector configuration
    20.  
      Delete connectors
  9. Pre-requisites to setup protection for M365
    1.  
      Pre-requisites to setup protection for M365
  10. Protect Microsoft 365 Multi-Geo tenant
    1.  
      Considerations for adding SharePoint/Teams Sites/OneDrive connectors for Microsoft 365 Multi-Geo tenant
  11. Protect Exchange Online data
    1. Setting up Exchange Online data protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for Exchange connectors
  12. Protect SharePoint sites and data
    1. Setting up SharePoint Online protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for SharePoint connectors
      2.  
        Configure additional backup options for SharePoint/Teams site/ OneDrive connectors
    2. Backup and restore support for SharePoint Online
      1.  
        Supported and unsupported SharePoint Objects, Properties, Settings, and Types for backup and restore
      2.  
        Supported Sites and List templates for backup and restore
      3.  
        Supported SharePoint permission objects for backup and restore
    3.  
      End-user SharePoint data access in Veritas Alta SaaS Protection
    4.  
      Run the Delete and Stubbing policies to the SharePoint Online environment
    5.  
      Backup limitations for SharePoint Online
  13. Protect Teams sites
    1. Setting up Teams Site protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for Team site collections connectors
    2.  
      Backup limitations for Teams site collections
  14. Protect OneDrive data
    1. Setting up OneDrive protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for OneDrive connectors
  15. Protect Teams chats
    1. Setting up Teams chat protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for Teams chat connectors
    2.  
      Backup limitations for Teams chat
  16. Protect Google Drive data
    1.  
      Prerequisites to setup Google Drive protection with Veritas Alta SaaS Protection
    2. Setting up Google Drive protection with Veritas Alta SaaS Protection
      1.  
        Configure Capture scope Google Drive connectors
    3.  
      Backup limitations for Google Drive
    4.  
      FAQs
  17. Protect Gmail data
    1.  
      Prerequisites to setup Gmail protection with Veritas Alta SaaS Protection
    2. Setting up Gmail protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for Gmail connectors
  18. Protect Audit logs
    1.  
      Add Audit log connectors
    2.  
      Audit log connector limitations
  19. Protect Salesforce data and metadata
    1.  
      About Salesforce protection
    2.  
      Key considerations and prerequisites for adding Salesforce connectors
    3.  
      Add Salesforce connectors
    4.  
      Limitations of Salesforce connectors
    5.  
      Salesforce Objects not supported for backup
  20. Protect Entra ID objects
    1.  
      Setting up Entra ID protection with Veritas Alta SaaS Protection
    2.  
      Backup and restore limitations for Entra ID
  21. Protect Box data
    1.  
      Prerequisites for Box connectors configuration
    2. Setting up Box protection with Veritas Alta SaaS Protection
      1.  
        Configure capture scope for Box connector
    3.  
      Backup limitations for Box data
  22. Protect Slack data
    1.  
      Add Slack connectors
  23. Protect Email/Message data
    1.  
      Prerequisite for Email/message connector
    2.  
      Add Email/Messages file
  24. Configure Retention policies
    1.  
      About WORM policies
    2.  
      Ingestion WORM policies page
    3.  
      Add/edit Ingestion WORM retention policies and guidelines
    4.  
      Add/edit At-Rest WORM retention policies
    5.  
      Add/edit Deletion policies
    6.  
      View deletion history
    7.  
      How to edit the policy evaluation interval?
    8.  
      How to add a Location filter?
    9.  
      How to add a filter?
  25. Perform backups
    1.  
      Perform on-demand/ad-hoc backup
    2.  
      Backup dashboard
    3.  
      Video tutorial for connector troubleshooting
    4. View backup events
      1.  
        About Event suppression
      2.  
        Create event suppression rules
    5.  
      Viewing backup tasks details
  26. View and share backed-up data
    1.  
      Browse backed-up data
    2.  
      Share data
    3.  
      Remove data sharing
  27. Analytics
    1.  
      About analytics
    2.  
      Analytics page and refresh behavior
    3.  
      Aggregation buckets
    4.  
      Gain insights into storage utilization
    5.  
      Gain insights into storage utilization for Entra ID and Salesforce connectors
    6.  
      Gain insights into blocked activities, most active users, and more
    7.  
      Gain insights into data volume (size and item count) on legal hold
    8.  
      Gain insights into data volume (size and item count) saved in different Enhanced cases
    9.  
      Gain insights into data volume (size and count) under different policies
    10.  
      Gain insights into data volume (size and item count) under different Tags
    11.  
      Gain insights into data volume (size and item count) under different Tags behaviors
    12.  
      Gain insights into storage savings after deduplication and compression
    13.  
      Gain insights into data ingestion trends
  28. Perform restores using Administration portal
    1.  
      About restore
    2.  
      Prerequisites for restore
    3.  
      Restore Exchange Online mailboxes
    4. Restore SharePoint/OneDrive/Teams Sites and data
      1.  
        Restore of OneDrive, Microsoft 365 Group, and Microsoft Teams sites
      2.  
        Restore limitations for SharePoint Online
    5. Restore Teams chat messages and Teams channel conversations
      1.  
        Restore limitations for Teams chat
    6.  
      Restore O365 audit logs
    7. Restore Box data
      1.  
        Restore limitations for Box
    8. Restore Google Drive data
      1.  
        Overwrite restore behavior for Box/Google Drive data
    9.  
      Restore Gmail data
    10. About Salesforce Data, Metadata, and CRM Content restore and Sandbox seeding
      1.  
        Guidelines for Schema changes in Salesforce organization to prevent restore failures
      2.  
        Restore Standard and Custom objects (Structured data restore)
      3.  
        Custom Object restore - post processing steps
      4.  
        Restore specific Records (Structured data) using Query filters
      5.  
        Restore Salesforce CRM Content (Unstructured data restore)
      6.  
        Restore Salesforce files/documents in Public/Shared libraries (Unstructured data restore)
      7.  
        Limitations of Salesforce Data restore
      8.  
        Salesforce Objects not supported for restore
      9.  
        Key considerations for Salesforce Metadata restore
      10.  
        Restore Salesforce Metadata
      11.  
        Limitations of Salesforce Metadata backup and restore
    11. About Entra ID (Azure AD) objects and records restore
      1.  
        Permissions requirement
      2.  
        Best practices to restore Entra ID objects
      3.  
        Restore an Entra ID object
      4.  
        Restore specific records within Entra ID objects
    12.  
      Restore Slack data
    13.  
      Restore data to File server
    14.  
      Set default restore point
    15.  
      Configure Restore all, Restore all versions, Point-in-time, and Specific range restore options
    16.  
      Configure email addresses for notifications
    17.  
      Downloading an item
  29. Restore dashboard
    1.  
      About Restore dashboard
    2.  
      Restore job statuses
    3.  
      How to cancel a restore job?
    4.  
      View the restore events
  30. Install services and utilities
    1.  
      About services and utilities
    2.  
      Pre-requisites to download and install services and utilities
    3.  
      Downloading services and utilities
    4.  
      Where to install the services and utilities
    5.  
      Installing or upgrading services and utilities
    6.  
      Configuring service accounts for services and utilities
    7. About the Apps Consent Grant Utility
      1.  
        Downloading the Apps Consent Grant Utility
      2.  
        Installing or upgrading the Apps Consent Grant Utility
      3.  
        Post-installation activities for the Apps Consent Grant Utility
  31. Discovery
    1. About eDiscovery/searches
      1.  
        Elasticsearch
    2.  
      Add search templates
    3.  
      Add Discovery cases
    4.  
      Perform ad hoc search and add data to Discovery cases
    5.  
      View data in Discovery cases
    6.  
      Edit Discovery cases
    7.  
      DeleteDiscovery cases
    8.  
      Assign Discovery cases to users
  32. Configure Tagging policies
    1.  
      About the Tagging policy
    2.  
      Add Tags
    3.  
      Add/edit Tagging policies
    4. Adding regular expressions
      1.  
        RegEx and query examples for PII detection
  33. Configure Tiering policy
    1. About the Tiering policy
      1.  
        Storage tiering and full-text search
      2.  
        User experience on storage tiering
      3.  
        Priority for storage Tiering
    2.  
      Add/edit Tiering policies
  34. Auditing
    1.  
      Auditing
  35. Manage Stors (Storages)
    1.  
      Viewing Stors (Storages)
    2.  
      Requesting a new Stor
    3.  
      General tab
    4.  
      Version control settings
    5.  
      Metadata tab
    6.  
      Statistical policies tab
    7.  
      Location-Mapping tab
    8.  
      Backup tab
    9.  
      Custodian Groups tab
    10.  
      Advanced tab
    11.  
      Analytics tab

Configure Capture scope Google Drive connectors

You can use one of the following procedures as per your backup requirement to backup users data in your Google Drive environment:

Configure the Google Drive connector to backup all users' data
  1. Click All users.
  2. ConfigureTable: Other settings, and then click Next.

    For more information,

Configure the Google Drive connector to backup all users' data but only exclude a few users' data from the backup scope
  1. Click All users.
  2. Click Add users.
  3. On the Add users address page, enter the email addresses of the users who are to be excluded from the backup scope.

    Use semicolon between email addresses.

  4. Configure other settings, and then click Next.

    For more information, See Table: Other settings.

Configure the Google Drive connector to backup specific users' data
  1. Click Specific users.
  2. On the Add users address page, enter the email addresses of the users who are to be added in the backup scope and click Add.

    You can also add email addresses of the groups that are to be included in the backup.

    Use semicolon between email addresses.

  3. Configure other settings, and then click Next.

    For more information, See Table: Other settings.

Configure the Google Drive connector to backup specific groups' data
  1. Click Specific users.
  2. Click Add users.
  3. On the Add users address page, enter the group email addresses of the Google groups to be included in the backup scope, and then click Add.

    Use semicolon between email addresses.

  4. Configure other settings, and then click Next.

    For more information, See Table: Other settings.

Configure the Google Drive connector to backup the Shared drives
  1. Click Shared drives.
  2. Configure other settings, and then click Next.

    For more information, See Table: Other settings.

Configure the capture scope to back up the Google Drive using the Alphabetical mailbox scope option

If you have a large number of drives in your environment, the backup scope can become extensive. To manage this scenario, configure the capture scope using the Alphabetical user scope option. You can map a range of drives to be included in the backup. It helps minimize the load on any one connector. To cover all the drives in your environment, you can configure multiple connectors.

  1. Click All users.
  2. Click the Alphabetical user scope option and do the following:

    • Enter the range of email addresses that you want to back up using this connector.

      For example, if you specify the start letter as 'A' and the end letter as 'F', all email addresses within the range of 'A' to 'F' are included in the backup scope.

      The mailboxes are processed based on the first letter of the email address.

      If you are using the Alphabetic user scope, you may need to enable theInclude users whose email addresses starts with non-alphabetical character option for one of the connectors. It backs up the mailboxes of the users whose email addresses do not begin with an alphabet.

  3. Configure other settings on the page, and click Next.

    For more information, See Other settings:.

Other settings:

Table: Other settings

Settings

Description

Backup deleted items

Select this check box to include deleted items in the backup.

By default, items are permanently deleted from the recycle bin after 30 days in Google Drive.

Capture permissions

Select this check box to capture the permissions on the items.

Folder filter

Configure it to limit the backup scope to specific folders only.

See Configure Folder filter.

Next step:

Configure credentials.