Operational Defect Database
BugZero found this defect 778 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Veeam | kb4322
How to Activate Access to Microsoft Graph Teams Export APIs
Last update date:
3/11/2024
Affected products:
Veeam Backup for Microsoft 365
Affected releases:
6.0
Fixed releases:
No fixed releases provided.
Description:
Purpose
Veeam Backup for Microsoft 365 6a and later provides an option to leverage Microsoft Graph Export API for Teams to back up Teams public channel posts. Support for Microsoft Graph Export API for Teams was implemented in Veeam Backup for Microsoft 365 6a and later because Microsoft deprecated the ability for EWS APIs to access the TeamsMessagesData folder. By default, Veeam Backup for Microsoft 365 7.0 and previous versions will attempt to utilize EWS APIs to protect the TeamsMessagsesData folder. However, as Microsoft has now deprecated EWS API access to the TeamsMessagesData folder, the only way to backup Teams public channel posts will be to configure Veeam Backup for Microsoft 365 to utilize the Teams Export APIs. Important Notes: Additional steps must be performed to protect Teams public channel posts, and then the Teams backup must be explicitly enabled. Utilizing the Microsoft Graph Export API for Teams comes at an additional cost from Microsoft.Veeam Backup for Microsoft 365 6a's API request will be considered as "model=B" The Microsoft Graph Export API for Teams is currently not supported in Microsoft 365 US Government region or China region.
Solution
Step 1: Register App When adding an organization with modern authentication to Veeam Backup for Microsoft 365, after following the login prompts, you will end up with an app registration. You will need information about this app registration to request Protected API access in the next section. Log into portal.azure.com and select Azure Active Directory. If your account has access to more than one directory, ensure you have selected the relevant one. Under Azure Active Directory overview, gather the Tenant ID. In the Veeam Backup for Microsoft 365 Console, right-click the Organization and select 'Edit organization'. Gather the Application ID. Under App Registrations in Azure AD, review the API permissions assigned to the app registration used. Ensure that the Microsoft Graph Application permission to ChannelMessage.Read.All is assigned.
