You have an Azure subscription that contains a Recovery Services vault named rsv-hr-backup in the East US 2 region. You also have a Premium storage account named sa-hr-records in the East US 2 region that hosts an SMB file share named fileshare-hr-smb.
The firewall of sa-hr-records is configured to allow access only from selected networks, and the 'Allow trusted Microsoft services to access this storage account' setting is disabled.
An administrator named Admin1 is assigned the Backup Operator role for rsv-hr-backup and has no other role assignments.
You need to ensure that Admin1 can configure backup for fileshare-hr-smb using rsv-hr-backup. Which two actions should you perform? (Select two.)
- Grant Admin1 the Contributor role on sa-hr-records.Cevap
- BGrant Admin1 the Owner role on rsv-hr-backup.
- In the firewall settings of sa-hr-records, enable the 'Allow trusted Microsoft services to access this storage account' exception.Cevap
- DIn the firewall settings of sa-hr-records, add the outbound IP address of rsv-hr-backup to the allowed firewall rules.
Cevap
Grant the administrator the Contributor role on the storage account and enable the 'Allow trusted Microsoft services to access this storage account' exception in the storage account firewall settings.
To successfully configure backups for a firewall-secured storage account, the Azure Backup service must be allowed to bypass the firewall. This is achieved by enabling the trusted Microsoft services exception in the storage account firewall settings. Additionally, the administrator who configures the backup must have write permissions on the storage account to perform the registration process, which is granted by the Contributor role.
Adım Adım Çözüm
Anahtar Kavram
Azure Files backup requires storage-level control plane permissions for registration and a firewall bypass for service access.