How to Restrict Which Azure Subscription(s) Can Be Accessed by an Azure Compute Account
Purpose
Use Case
By default, IAM roles are assigned to a newly created Microsoft Entra ID application on all subscriptions visible to the Microsoft Entra ID user logged in on the device log in page.
- Some customers may wish to restrict this and would otherwise have to remove role assignments from other subscriptions manually.
- In some cases, access to more subscriptions than is strictly necessary could cause delays when adding the Azure Compute account.
Solution
Create the following registry value on the Veeam Backup Server, replacing <SubscriptionIDs> with a list of Azure Subscriptions IDs that should be used by Veeam Backup & Replication when adding an Azure Compute account.
Key Location: HKLM\SOFTWARE\Veeam\Veeam Backup and Replication\
Value Name: AzureSubscriptionIdsToInclude
Value Type: Multi-String Value (REG_MULTI_SZ)
Value Data: <SubscriptionIDs>
Each Subscription ID should be on its own line.
Example:
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.