Skip to main content

Get started with protecting Azure Blob Storage with Enterprise Workloads

Updated today

Welcome! This guide helps you set up backups to protect your critical data stored in Azure Blob storage. You can protect data at the storage account, container, or individual Blob level.

Understand Azure Blob data protection

Druva helps protect your Azure Blobs from data loss, ransomware, and other issues. Here's how:

  • Agentless solution: It works without needing to install anything extra on your Azure Blob storage.

  • Air-gapped protection: Your backups are stored safely in an air-gapped cloud environment managed in AWS.

  • Easy recovery: You can easily restore your data across different Azure regions or subscriptions.

  • Cost-effective: It's designed to be budget-friendly.

Get started with Enterprise Workloads

Log into the management console to:

  1. Create and manage Administrators and Administrative Groups.

  2. Enable organizations. Alternatively, you may use the Default Organization.

Plan and set up your Azure environment

  1. Check compatibility: Make sure your Azure Blob setup is supported. Check the support matrix for details on features, encryption, and supported AWS, Azure, and Gov Cloud regions.

  2. Access and permissions: You must have the Global Administrator role with Microsoft.Authorization/roleAssignments permission. Alternatively, you must have Owner access at the tenant level. To know more, see Roles and permissions to protect Azure Resources.

  3. Application registration: The Global Administrator role is required to:

    • Register the application in Azure Entra ID.

    • Define and assign custom roles.

    • Provision the Resource Group and Azure Key Vault.

    • Ensure that the Users can register applications setting is enabled in Azure Entra ID.

  4. Service configuration: The subscription must have Azure Key Vault service (Microsoft.KeyVault) registered under Resource Providers.

Onboard Azure Subscriptions

  1. Register your Azure Tenant and authorize Druva to add new subscriptions.

  2. Assign an administrative group to manage subscriptions. If none exist, create one.

  3. Choose Druva storage based on the Azure region where your data resides.

  4. Authorize subscriptions by allowing Druva to create an access key in Azure Key Vault. This key secures your backups.

Once added, Druva automatically detects and lists the storage accounts under the Azure subscription.

Configure Azure Blob Storage for backup

  1. Select storage accounts that have containers you want to back up.

    1. Setting the backup schedule.

    2. Choosing containers or specific paths to back up.

    3. Optionally including/excluding files based on file types, extensions, Blob Index Tags, or prefixes.

Restore Azure Blobs data from a backup set

On successful backup, you can restore Azure Blobs data from a backup set.

  1. Select a backup set and click Restore.

  2. Choose the restore destination:

    • Original location – Restores data to the same storage account with original settings.

    • Alternate location – Lets you choose a different subscription, region, storage account, and optional container.

📌Additional resources to help you get started

Did this answer your question?