Skip to main content

Microsoft Azure

This section provides information to help you prepare your Azure Account to be used with CxLink Backup. Ensure that you have the proper permissions to create or adapt the desired resources to the cxlink backup requirements.

Topics

Overview​

CxLink Backup will connect to Azure Storage Blob to store the backup objects. The instance where the database is running will need granted access to the proper resources.

You will need to create an storage account and at least one container.

If you don't have neither an storage account nor a container, you can use the Microsoft Azure Portal to create them, following the guidelines in https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal:

  1. Sign in to the Microsoft Azure Portal

  2. Choose Storage accounts

  3. Press Create.

  4. Set storage account basic attributes:

    • Resource group where storage account will be created
    • Storage account name
    • Region
    • Performance
    • Redundancy

  5. Choose Review + create

Create a Storage Blob container for backups​

To create a storage blob container, use the Microsoft Azure Portal:

  • Choose Storage accounts
  • Under storage account attributes, access to Data storage -> Containers
  • Set a container name and Public access level to Private

(optional) Configure managed identity for virtual machines​

For CxLink Backup to be able to store and retrieve backups from Azure, you can configure storage account name and storage account key o have your virtual machines with identity managed configured.

Azure managed identities

If you need additional information, follow the guidelines described in https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-vm-windows-access-storage

The following storage account storage access roles must be granted to use all the configuration options available in CxLink Backup agent settings:

  • Owner
  • Storage Blob Data Contributor

As an example, for a virtual machine named emoryazdb2 and an storage account named emorydevelopment this would be the roles assignment:

Azure virtual machine managed identity roles