Below is a list of all permissions you will be required to allow in order to back up a specific Microsoft 365 service with the RedApp. To read more about Redstor's cloud security, see this article.

Note:

  • To add a backup set and do a first recovery of any service (Exhange, OneDrive, SharePoint, Teams), you need to be both a RedApp company administrator, and a Microsoft 365 global administrator for your tenant organisation.
  • To do subsequent recoveries, you need to be a RedApp company administrator and a Microsoft 365 product administrator, i.e. Exchange admin, SharePoint admin, or Teams admin. In the case of OneDrive, however, you need to be a Microsoft 365 global administrator, as there is no product administrator role.
  • Read more about Microsoft's admin roles in this article on their knowledge base.

 

Exchange

  • Read all hidden memberships
  • Read mail in all mailboxes
  • Read contacts in all mailboxes
  • Read directory data Read calendars in all mailboxes
  • Sign in and read user profile
  • Use Exchange Web Services with full access to all mailboxes

 

OneDrive

  • Read all hidden memberships
  • Read all OneNote notebooks
  • Read files in all site collections
  • Read the organization's roster
  • Read directory data
  • Sign in and read user profile
  • View notes for all users

 

SharePoint

  • Read items in all site collections
  • Read all OneNote notebooks
  • Read files in all site collections
  • Read the organization's roster
  • Read directory data
  • Sign in and read user profile
  • View notes for all users
  • Have full control of all site collections

 

Teams

  • Read all hidden memberships
  • Read all OneNote notebooks
  • Read files in all site collections
  • Read the organization's roster
  • Read all chat messages
  • Read all channel messages
  • Read directory data
  • Sign in and read user profile
  • View notes for all users
  • Have full control of all site collections