Skip to main content

File Level Restore for Azure Virtual Machines

With the File Level Restore functionality, you can restore specific files and folders from Azure disk backups. You can recover files and folders to a custom storage container within your chosen Region and Storage Account.

Prerequisites

Before initiating a File-level restore, ensure your environment meets the following requirements and disk compatibility criteria.

Azure Permissions and Network Access

  • Azure RBAC Permissions: File-level restore requires expanded custom role permissions. To apply the latest custom role permissions to your target subscriptions, go to Enterprise Workloads > Protect > Go To Azure > All Subscriptions, select your subscription, and select Update Tenant.
    For permissions specific to file-level restore, see Permissions for File-Level Restore.

  • Target Storage Account: The target subscription must contain at least one active standard Azure Blob Storage account (flat namespace) with a Blob container in the target subscription and region. Storage accounts with Hierarchical namespace enabled (Azure Data Lake Storage Gen2) are not supported.

  • Network Access: The target storage account must have Public network access set to Enabled from all networks. File-level restore does not support storage accounts configured with private endpoints or restricted virtual networks.

Disk and Volume Compatibility

  • Supported Disks: Managed Disks (Standard HDD, Standard SSD, and Premium SSD), excluding.

  • Unsupported Disks: Premium SSD v2 (PremiumSSD_V2) and Ultra SSD (UltraSSD_LRS).

  • Unsupported Storage: Disks configured with Windows Storage Spaces, Disks configured with Azure Disk Encryption (ADE).

For detailed information on troubleshooting FLR issues, see Azure VM Error Reference.

Update permissions for File Level Restore

  1. Log in to your Microsoft Azure account that has been registered with us.

  2. Locate the list of Subscriptions and select the one for which you want to update the IAM role.

  3. Navigate to Access Control (IAM) > Roles and search for Drv-Role within Roles.
    You can see one or more custom Role(s) based on how many times this Subscription has been onboarded across multiple organizations.

  4. Click on the three dots at the end of the row and click Edit.

  5. Navigate to the JSON tab at the top and click Edit.

    1. Add the following permissions on Permissions > actions

      • Microsoft.Storage/storageAccounts/read

      • Microsoft.Storage/storageAccounts/blobServices/containers/read

      • Microsoft.Storage/storageAccounts/blobServices/containers/write

      • Microsoft.Storage/storageAccounts/blobServices/containers/delete

    2. Add the following permissions on Permissions > dataActions

      • Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write

      • Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete"

6. Click Save and then select Review + update.
​

You have now successfully updated this IAM role. Repeat these steps for every role for all registered subscriptions.

Initiate File Level Restore

  1. Log in to the Druva Cloud Platform Console. On the Global Navigation Panel, click Azure and select Organization.
    Alternatively, you can navigate to the Enterprise Workloads Management Console and select the Organization from the top menu. Select Protect > Go to Azure > Virtual Machines.
    ​

  2. Navigate to the Protected VMs page, and select the virtual machine you want to restore.

  3. Select a recovery point and click Restore.
    ​

    📝 Note
    ​Select a Recovery Point from the Operational Recovery tab to proceed with a full restore. The Cyber Recovery tab becomes available only when the appropriate Security license is enabled. ​The Recovery Insights (Cyber Recovery) feature provides insights on the Cyber Resiliency of your Azure virtual machines. For more information, see Restore Azure virtual machines using Cyber Recovery.

  4. To initiate a File level restore, select Data Restore > Files & Folders and then select Browse Selected Recovery Point:

​📝 Note

Ensure that you have updated the Azure IAM role for the Azure Subscriptions registered with us. For more information, see Update permissions for File Level Restore.

6. On the Warm tab, select a specific date and time to view the directory of files for that specific recovery point.

📝 Note

File level restore is supported only for warm recovery points.

7. Review the Restore Target settings that are pre-populated. Click the edit icon to modify the settings, as applicable:

Field

Description

Subscription

The Azure Subscription that the recovery points are associated with.

Region

The Azure Region where the restored files will reside.

Storage Account

The Azure Storage Account in which the restored files will be available.

Storage Container

The Storage Container in which the restored files will remain available.

📝 Note

The storage container specified should be publicly accessible. Restore is not supported to a storage container with a private endpoint.

8. Navigate to your Azure Jobs page to track the restore job.

Click the Job ID and navigate to the Restore Location to view the Storage Account and Storage container where the files will be restored.

Related Articles
Did this answer your question?