Overview
Auto-Configuration Rules provide an automated and efficient way to manage backup settings for Microsoft 365 resources. These rules dynamically group and configure resources based on specific attributes.
For example, if you have a backup profile called RPGroups that should apply to all groups containing the word test in their name, you can create a rule with the condition Name contains test. The system will automatically identify all matching resources and prompt you to assign a backup profile and storage region. You can select an existing profile from the dropdown menu or create a new Backup profile.
Once the rule is synced, all discovered groups containing test in their name will automatically inherit the settings from the RPGroups backup profile. The rule syncs every 24 hours, ensuring that backup profiles are consistently updated based on the defined conditions.
Key Benefits of Auto-Configuration Rules:
Automated Backup Assignments – Automatically map predefined backup configurations to Microsoft 365 resources.
Attribute-Based Rules – Use resource properties (e.g., name, size) to trigger specific backup profiles.
Granular Data Protection – Customize backup frequency and retention policies based on resource type or classification.
Simplified Management – Reduce manual effort and streamline backup configuration.
Optimized Backup Strategy – Ensure appropriate data protection levels for different Microsoft 365 resources.
This article explains how to create, assign, and sync auto-configuration rules for Microsoft 365 org app resources. Following these steps ensures that all discovered resources are correctly mapped, assigned appropriate profiles, and have the necessary backup settings applied.
Managing Auto Configuration Rules
The Auto Configuration Rules listing page provides a centralized view of all your auto configuration rules, both default and custom. Access this page by clicking Auto Configuration Rules in the left navigation menu under Org Apps. This page displays each rule's key settings, including:
Rule Name: The name of the rule.
Priority: The priority of the rule.
📝Note: If multiple org apps are configured, the Microsoft Group rules have the highest priority, followed by the team rules, with the SharePoint-specific rules coming in last.
Backup Profile: The backup profile assigned to the rule.
The Backup Profile listing page also provides the following actions:
Creating New Rules: Create a new, custom rule tailored to your specific needs.
Updating Rules: Click a rule to open its job summary, then click "Edit" to modify its properties.
Syncing Rules: After creating rules, click Sync Now to apply the backup settings to the discovered resources according to rule priority.
Changing rule priority: Click the three-dot menu on the workload card, select Change Priority, and drag the rules to reorder them. Alternatively, you can edit the rule and choose a priority from the dropdown menu. For more details, see Creating a New Auto Configuration Rule below.
Creating a New Auto Configuration Rule
This section outlines the steps to create a new autoconfiguration rule for your Microsoft 365 org apps data.
Procedure
Access the Druva Console: Login to the Druva Console.
Navigate to Auto Configuration Rule: In the left navigation pane, under the Org Apps section, click Auto Configuration Rules.
Create a New Rule: Click the New Rule button. The org app rule creation wizard will appear. This wizard guides you through the process, which is divided into three tabs: Overview, Resources, and Backup Settings.
Step 1: Overview
On the "Overview" tab, provide the following information:
Name: Enter a name for the rule.
Description: (Optional) Add a brief description of the rule.
Workload Type: Select the type of Microsoft 365 data you want to back up: Groups, Teams, or SharePoint.
❗Important
The workload type cannot be changed after the rule is created.
Rule Priority: Assign a priority to the rule, with 1 being the highest. The field is auto-populated with the next available priority.
❗Important
If multiple rules exist and you assign priority 1 to a new rule, the priority of all existing rules shifts down by 1 (e.g., the previous priority 1 becomes 2, 2 becomes 3, and so on).
Unmatched resources: Check this option to disable backups for resources that no longer fall within the rule boundaries if the rule is modified or deleted. If left unchecked, backups for these resources will continue even if they no longer meet the rule's criteria.
📝NOTE:
These resources will be evaluated during each rule sync and periodically every 24 hours, and if they match any other rule, they will be automatically enabled for backup based on the profile of the matching rule.
💡TIP:
To identify resources where the backup was disabled due to the deletion or update of a rule, navigate to the configured resource page and apply filters to show the resources where the backup is disabled, but auto-configuration is enabled.
Step 2: Resources
This tab allows you to select discovered resources to map to the rule. You can choose one of the following options:
All discovered resources: Apply the rule to all discovered resources of the workload by selecting this option and clicking Next.
Specify resources using conditions: Define logical AND/OR conditions based on resource attributes to apply the rule to a specific group of resources.
Adding Conditions
If you want to apply the rule to a subset of resources instead of all discovered resources:
Select Specify resources using conditions, then click Add Condition.
In the pop-up window:
Select resources:
All conditions are met: apply an AND operation to all conditions you add.
Any condition is met: apply an OR operation among the conditions.
Select the site attributes: Attribute options vary based on the selected resource. See condition matrix.
Choose an operator from the dropdown menu. See condition matrix.
Enter the operator value.
📝 Note: You can add up to 10 values at a time in the value field.For valid condition combinations, See condition matrix below.
📝 Note: You can create unlimited conditions, but only up to 10 rules per workload.Click Refresh to fetch a count of resources that meet the rule criteria and then click Next.
On the second card in Step 2 of the wizard, you'll see the number of resources eligible for configuration under the following categories:
Not Configured: Number of resources that are not auto configured using any rule.
Auto-Configured: Number of resources already configured using another rule.
Manually Configured: Number of resources that have been manually configured. See manual configuration.
📝NOTE:
Sites configured through a parent (Group/Team) are not included in the counts displayed.
For Security groups, the email ids are not available. To create a rule for the site attribute sensitivity label, enter a blank space in the Value text box and click Refresh.
Condition Matrix
SharePoint
Type of resources mapped: SharePoint Sites
Attribute Name | Operators (choose any) | Values |
Site Name | equals not equal to contains does not contains starts with | Enter the site names. |
URL | equals not equal to contains does not contains starts with | Enter the URLs. |
Geo Location | equals not equal to | Select the geo location. |
Site Owner | equals not equal to contains does not contains starts with | Enter the site owner's name. |
Template | equals not equal to | Select the geo location. |
Modified Time | On Before After WithIn Older Than | Enter the date. |
Sensitivity Label | equals not equal to contains does not contains starts with | Enter the sensitivity label. |
Created Time | On Before After WithIn Older Than | Enter the date. |
Teams
Type of resources mapped: teams and TeamSites
Attribute Name | Operators (choose any) | Values |
Team Name | equals not equal to contains does not contains starts with | Enter the Team names. |
Site Name | equals not equal to contains does not contains starts with | Enter the TeamSite names. |
Site URL | equals not equal to contains does not contains starts with | Enter the URLs. |
Team Sensitivity Label | equals not equal to contains does not contains starts with | Enter the sensitivity label. |
Created Time | Equals Not Equal to Less than Less than or Equal Greater than Greater than or Equal Older Than Newer Than | Enter the date. |
Team Privacy | equals not equal to contains does not contains starts with | Enter the team privacy state |
Groups
Type of resources mapped: Groups and GroupsSites
Attribute Name | Operators (choose any one) | Values |
Group Name | equals not equal to contains does not contains starts with | Enter the Group names. |
Group Geo Location | equals not equal to contains does not contains starts with | Select the geo location. |
Group Type | equals not equal to contains does not contains starts with | Enter the Group type. |
Group Email | equals not equal to contains does not contains starts with | Enter the Group email. |
Group Privacy | equals not equal to contains does not contains starts with | Enter the Group privacy state. |
Created Time | equals Not Equal to Less than Less than or Equal Greater than Greater than or Equal Older Than Newer Than | Enter the Created time. |
Teams Attached | equals | Enter the Teams attached. |
Site Name | equals not equal to contains does not contains starts with | Enter the Site name. |
Site URL | equals not equal to contains does not contains starts with | Enter the Site url. |
Step 3: Backup Settings
On the Backup tab, provide the following details:
Storage Region: Select a storage region from the dropdown menu.
Backup Profile: Choose a backup profile from the list of default or custom profiles, or select New Backup Profile to create a new one. For more details, see Creating a New Profile.
Review the backup profile summary displayed, then click Finish.
Updating a Rule
You can update certain properties of a rule after its creation. Some settings are permanent and cannot be changed after the profile is created. These are typically related to core profile configurations like the initial workload selection.
Procedure:
Navigate to Auto Configuration Rule.
Open Rule Summary: Click the name of the rule you want to update. This opens the rule's summary page.
Access Summary Tab
This tab displays all rule details. The Resource tab shows affected resources but cannot be edited.Find the card on the Summary tab containing the property you wish to change.
Click the Edit button next to the relevant card. Follow the on-screen instructions to modify the property.
📝Note:
You can update properties such as unmatched resources, rule name, assigned backup profile (including creating and assigning a new profile), and modify conditions at any time for any rule. However, the associated workload cannot be changed.
Triggering the Rule Sync
When the rules are created they need to be synced to enforce the desired backup settings for the impacted resources. To sync the rule follow the procedure below.
Procedure
Access the Druva Console: Login to the Druva Console.
Navigate to Auto Configuration Rule: In the left navigation pane, under the Org Apps section, click Auto Configuration Rules.
Sync Rule: Click the Sync Now button. The rule will start syncing in the background.
📝Note: Applying rules to all resources may take some time. Avoid triggering a re-sync while a rule is running, as a new sync will not start until the current operation is complete. Once synchronization is finished, the Last Synced At timestamp will be updated.
All rules are synced every 24 hours.
Deleting A Rule
Deleting a rule is permanent and cannot be undone. When you delete an auto-configuration rule, the associated resources are unmapped from it. Backup behavior for these resources depends on the Unmatched Resources Setting — if checked, backup is disabled; if unchecked, backup continues.
Procedure:
On the rule listing page, select the rule you want to delete.
The Rule Summary page for the selected rule will appear.Click the Delete button.
On the confirmation screen, provide a reason for the deletion (optional), and then click Delete.
Click Sync Now to apply the changes.
Manual Configuration
You can manually configure a resource using the procedure below.
Procedure
Access the Druva Console: Login to the Druva Console.
Navigate to the Resource: In the left navigation pane, click on the desired workload.
Select the Resource: Choose the resource you want to configure manually, then click Configure for Backup.
Customize Backup Settings: In the confirmation popup:
Add additional resources if needed.
Select an existing backup profile from the dropdown menu, or create a new backup profile.
Save the Configuration: Click Save to apply the changes.
While creating a new rule or adding a condition to map this resource to a rule, the Matching Resource section in the wizard will display the manually configured resource. If manually configured resources exist, a confirmation popup will prompt you to choose between:
Skip : Keep the resource manually configured.
Override with This Rule: Apply the selected auto-configuration rule settings to the resource.
Alerts and Audit Trails
Any changes to a rule, including updates, creation, or deletion, trigger an alert notification, an email message, and are recorded in the audit logs.