Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Information about backup and recovery for Microsoft 365 tenants.
Learn about integrating a Microsoft 365 tenant with GitProtect to protect its resources.
Learn how to back up your Microsoft 365 resources with GitProtect.
How to restore Microsoft Exchange, OneDrive, and SharePoint data from backup.
Learn about integrating a Microsoft 365 tenant with GitProtect to protect its resources.
Permissions required for integrating Microsoft 365 with GitProtect.
How to integrate a Microsoft 365 organization with GitProtect.
How to integrate a Microsoft 365 organization with GitProtect and include SharePoint protection.
Learn how to back up your Microsoft 365 resources with GitProtect.
An overview of Microsoft 365 backup plans in GitProtect.
Overview of Microsoft 365 resources protected by backup, including applications such as Microsoft Exchange, OneDrive, and SharePoint.
Learn how to create a Microsoft 365 backup plan in GitProtect to configure protection for Microsoft Exchange, OneDrive, and SharePoint.
How to restore Microsoft Exchange, OneDrive, and SharePoint data from backup.
Restore emails, calendars, contacts, and selected OneDrive folders and files from a backup.
Learn how to restore SharePoint sites from a backup.
Permissions required for integrating Microsoft 365 with GitProtect.
The required Microsoft 365 permissions define the access levels GitProtect needs to securely back up and restore your data.
To integrate a Microsoft 365 organization with GitProtect, ensure it uses a Microsoft 365 business license.
To back up a single Microsoft 365 account, the account must have a Microsoft 365 license assigned. This also applies to shared mailboxes. License assignments can be managed in the Microsoft 365 admin center.
Each Microsoft 365 account and shared mailbox requires one GitProtect license to back up its data.
The backup process requires a backup agent (worker), which communicates with the Microsoft 365 API, downloads the requested data, and performs the backup. You can use either a cloud or local worker. Any device with the Xopero ONE Backup&Recovery Agent installed can act as a worker.
To add your Microsoft 365 organization to GitProtect, you must use a global administrator account. Only a global administrator has the necessary permissions to back up data from all user accounts in the organization.
The following tables list Xopero apps and their permissions, which are automatically installed in the end user's Entra ID when integrating Microsoft 365 with GitProtect.
This application is used at the beginning of the integration to install and grant the necessary permissions for the Xopero ONE MS365 PRO app.
Microsoft Graph
Directory.AccessAsUser.All
Access directory as the signed-in user.
delegated
This application is required to back up and recover data from Microsoft 365 tenants and is installed automatically in Entra ID by Xopero ONE Registrator.
Microsoft Graph
Mail.ReadWrite
Read and write mail in all mailboxes.
application
How to integrate a Microsoft 365 organization with GitProtect and include SharePoint protection.
Enabling SharePoint protection in GitProtect allows SharePoint sites to be included in the Microsoft 365 backup scope. The setup follows the same tenant-based flow used for other Microsoft 365 resources and requires that the necessary prerequisites and permissions are in place before backup configuration is started.
The following documentation applies only to Microsoft 365 organizations with GitProtect licenses (Microsoft 365 PRO) that include backup for Microsoft Exchange data (including individual mailboxes, shared mailboxes, calendars, and contacts), SharePoint, and OneDrive.
For instructions on adding Microsoft 365 tenants with only Microsoft Exchange and OneDrive protection to GitProtect, see this article.
The below steps demonstrate how to integrate a Microsoft 365 organization with GitProtect using GitProtect Management Service.
Select Microsoft 365 from the left pane.
Click Connect under Microsoft 365 Pro.
The following steps demonstrate how to enable SharePoint protection for existing Microsoft 365 organizations using GitProtect Management Service.
Select Microsoft 365 from the left pane.
Click Edit in the lower-left corner of the organization tile.
An overview of Microsoft 365 backup plans in GitProtect.
In GitProtect, creating a backup plan allows you to define what data should be protected, where backups are stored, and how often they are performed.
A Microsoft 365 backup plan in GitProtect defines which data is protected, how frequently backups are performed, and how long recovery points are retained. A dedicated Microsoft 365 backup plan enables protection of mailboxes, OneDrive resources, and SharePoint sites while applying automated schedules and granular retention policies that align with organizational data protection and compliance requirements.
To optimize backup tasks, GitProtect Management Service provides several advanced features that enable flexible configuration based on specific infrastructure requirements. When creating a backup plan, you can customize settings such as backup windows, task balancing, storage locations, bandwidth limits, and more.
GitProtect provides granular control over Microsoft 365 backups. Instead of backing up an entire environment, you can selectively target specific data types—such as messages, calendars, or contacts—to optimize storage capacity and focus exclusively on critical assets.
GitProtect supports Microsoft 365 groups — they appear in the users list (for example, when creating a backup plan) and can be used to filter it.
Restore emails, calendars, contacts, and selected OneDrive folders and files from a backup.
Microsoft Exchange and OneDrive data can be restored with granular control over the recovery scope and destination. Emails, calendars, contacts, files, and folders can be restored directly to a Microsoft 365 user account or locally to a device, supporting recovery after accidental deletion, migration, and other data-loss scenarios.
The below steps demonstrate how to restore Microsoft Exchange data and OneDrive folders and files using GitProtect Management Service.
Open the Microsoft 365 tab, then click the Explore button next to the organization whose backup you want to restore.
How to integrate a Microsoft 365 organization with GitProtect.
Adding a Microsoft 365 tenant to GitProtect connects your organization's environment and enables data protection for supported services. The integration requires proper authorization and tenant-level permissions to establish a secure connection between Microsoft 365 and GitProtect, allowing you to configure backup settings, manage protection policies, and perform recovery operations.
The following documentation applies only to Microsoft 365 organizations with GitProtect licenses that include backup for Microsoft Exchange data (including individual mailboxes, calendars, and contacts) and OneDrive.
For instructions on enabling protection for SharePoint sites in new and existing Microsoft 365 organizations, refer to the article.
The below steps demonstrate how to integrate a Microsoft 365 organization with GitProtect using GitProtect Management Service.
In Advanced configuration, enable the Enable SharePoint protection switch, and specify whether GitProtect should automatically assign licenses to users.
Next, click the Add new or select certificate from (…) tile. In the Add certificate pane, select the certificate option that aligns with your deployment model: automatically generate a certificate, upload a custom certificate, or select an existing certificate from the list. Once done, click Save.
Set the synchronization interval (if needed), review your settings, and click Save to proceed.
Back in the Add new organization pane, copy the authentication code, and then click Log in to Microsoft 365.
In the Microsoft authentication tab, paste the copied code and click Next.
Select your account and sign in if prompted. Next, click Continue to confirm your sign-in to Xopero Registrator.
If the registration is completed successfully, the following message will appear. Close the tab and return to GitProtect Management Service.
The Microsoft 365 organization has been successfully added to GitProtect. Click Custom policy to modify your backup policy settings, or click Run backup to start a backup using the current policy configuration.
In the Add certificate pane, select the certificate option that aligns with your deployment model: automatically generate a certificate, upload a custom certificate, or select an existing certificate from the list. Once done, click Save.
The system will automatically prompt you to create or run a default backup plan. You can skip this step and configure the SharePoint backup plan later.
Back in the Microsoft 365 organization dashboard, click Repair to configure permissions for SharePoint protection.
To start the permission update process, click Continue at the bottom of the Edit organization pane. If prompted, sign in to your Microsoft 365 account and grant GitProtect the required permissions.
After the required permissions have been granted, you can configure a SharePoint backup plan and start protecting your resources.
In the Microsoft 365 Users tab, search for the user whose data you want to restore, and then click the restore button in the action menu for that user.
Next, select the backup plan from which you want to restore data. Click View available plans, and then select a plan from the list.
Choose the backup version from all the backups that have already been performed — select the desired date and click the Restore button.
Select the restore destination and click Next.
In the next pane, browse the tabs, select the data you want to restore, and click Restore selected. Alternatively, click Restore all to restore all available data.
Next, depending on the selected restore destination, configure the Restore to and Restore directory settings.
In the Restore directory section, choose one of the following options:
New directory — creates a new directory to restore the data to.
Original directory — restores the data to its original location. You can also choose to overwrite existing OneDrive files and email messages.
In the Restore to pane, select the user to whom you want to restore the data, and click Save.
In the Restore directory section, choose one of the following options:
New directory — creates a new directory to restore the data to.
Original directory — restores the data to its original location. You can also choose to overwrite existing OneDrive files and email messages.
In the Restore to pane, select the device to use as the restore destination, and click Save.
In the Restore directory section, select the directory where the data will be restored, and then click Apply.
In Restore settings, you can limit bandwidth usage and select the default backup agent (worker) that will be used to restore the data (where applicable).
After defining all parameters, click the Restore button to start the recovery process. You can monitor the process in the Tasks tab.
Select Microsoft 365 from the left pane.
Click Connect under Microsoft 365.
Copy the authentication code, then click Log in to Microsoft 365.
In the Microsoft authentication tab, paste the copied code and click Next.
Select your account and sign in if prompted. Next, click Continue to confirm your sign-in to Xopero Registrator.
If the registration is completed successfully, the following message will appear. Close the tab and return to GitProtect Management Service.
The Microsoft 365 organization has been successfully added to GitProtect. Click Custom policy to modify your backup policy settings, or click Run backup to start a backup using the current policy configuration.
After adding the organization, you may see the following message. Click Repair to configure permissions for shared mailbox protection.
To start the permission update process, click Continue at the bottom of the configuration pane. If prompted, sign in to your Microsoft 365 account and grant GitProtect the required permissions.
After the required permissions have been granted, you can configure a Microsoft 365 backup plan and start protecting your resources.
Learn how to create a Microsoft 365 backup plan in GitProtect to configure protection for Microsoft Exchange, OneDrive, and SharePoint.
A reliable backup plan is essential for protecting your Microsoft 365 organization's resources and ensuring business continuity when unexpected events occur.
The following steps demonstrate how to create a Microsoft Exchange and OneDrive backup plan using GitProtect Management Service.
Open the Backup tab (Plans > Backup) and click the + Add plan button in the top bar.
Select Microsoft 365 from the list.
Select the Microsoft 365 Exchange option.
Click Select, then specify whether you want to protect the entire organization or only specific user accounts or shared mailboxes.
Set up a name for your backup plan.
In Data to protect section, select the resources that you want to back up. You can also change the default backup agent (worker), which is directly responsible for backing up your Microsoft 365 data.
Select one of the data stores assigned to your GitProtect instance to use as the backup storage.
Customize the scheduler and specify the retention period for your data.
Adjust the advanced settings, such as encryption, error handling, or bandwidth limit, to meet your organization's requirements.
Encryption: lets you secure your backup copy with encryption.
Compression: lets you compress and reduce copy size.
Deduplication: allows you to reduce the backup size.
Error handling: allows you to specify how to handle potential backup operation errors.
Bandwidth limit: allows you to reduce network usage and limit network speed during backup.
Backup scripts: enables configuring pre/post scripts executed during backup.
Microsoft 365 diagnostics: lets you enable pre-backup diagnostics, such as the mail message download test.
Task balancing: balances backup speed and CPU load.
Prevent system sleep: prevents your system from suspending while a backup is in progress.
Email notifications: lets you set up email notifications and its recipients.
S3 Buffer Settings: allows you to specify the buffer size allocated for large resources.
Review your configuration and click Save to create the backup plan, or Save&Run to start the first backup run immediately.
The following steps demonstrate how to create a SharePoint backup plan using GitProtect Management Service.
Open the Backup tab (Plans > Backup) and click the + Add plan button in the top bar.
Select Microsoft 365 from the list.
Select the SharePoint sites option.
Click Select, then specify whether you want to protect the entire environment or only specific SharePoint sites.
Set up a name for your backup plan.
In Data to protect section, you can change the default backup agent (worker), which is directly responsible for backing up your SharePoint data.
Select one of the data stores assigned to your GitProtect instance to use as the backup storage.
Customize the scheduler and specify the retention period for your data.
Adjust the advanced settings, such as encryption, error handling, or bandwidth limit, to meet your organization's requirements.
Encryption: lets you secure your backup copy with encryption.
Compression: lets you compress and reduce copy size.
Review your configuration and click Save to create the backup plan, or Save&Run to start the first backup run immediately.
Learn how to restore SharePoint sites from a backup.
GitProtect allows you to recover SharePoint data from available backup points and restore it to the original location or another selected destination. The recovery process helps restore entire sites after accidental deletion, unwanted changes, or other data-loss scenarios while preserving their structure, documents, lists, and associated data.
The below steps demonstrate how to restore SharePoint sites and their metadata using GitProtect Management Service.
Open the Microsoft 365 tab, then click the Explore button next to the organization whose backup you want to restore.
In the SharePoint Sites tab, search for the site whose data you want to restore, and then click the restore button in the action menu for that site.
Next, select the backup plan from which you want to restore data. Click View available plans, and then select a plan from the list.
Choose the backup version from all the backups that have already been performed — select the desired date and click the Restore button.
Select the restore destination and click Next.
In the next pane, select the data you want to restore, and then click Restore selected. Alternatively, click Restore all to restore all available data.
Next, depending on the selected restore destination, configure the Restore to and Restore directory settings.
In the Overwrite data section, choose one of the following options:
Don't overwrite site and its data.
In Restore settings, you can limit bandwidth usage and select the default backup agent (worker) that will be used to restore the data (where applicable).
After defining all parameters, click the Restore button to start the recovery process. You can monitor the process in the Tasks tab.
Error handling: allows you to specify how to handle potential backup operation errors.
Bandwidth limit: allows you to reduce network usage and limit network speed during backup.
Backup scripts: enables configuring pre/post scripts executed during backup.
Task balancing: balances backup speed and CPU load.
Prevent system sleep: prevents your system from suspending while a backup is in progress.
Email notifications: lets you set up email notifications and its recipients.
Always overwrite.
In the Site permissions section, specify whether GitProtect should restore site permissions along with other site data.
In the Restore to pane, select the site where you want to restore the data, and click Save.
In the Overwrite data section, choose one of the following options:
Don't overwrite site and its data.
Overwrite only if existing resources are older than restored.
Always overwrite.
In the Site permissions section, specify whether GitProtect should restore site permissions along with other site data.
In the Restore to pane, select the Microsoft 365 organization where you want to restore the data, and click Save.
Next, enter a custom name for the new site.
In the Site permissions section, specify whether GitProtect should restore site permissions along with other site data.
In the Restore to pane, select the device to use as the restore destination, and click Save.
In the Restore directory section, select the directory where the data will be restored, and then click Apply.
Office 365 Exchange Online
full_access_as_app
Use Exchange Web Services (EWS) with full access to all mailboxes.
application
Office 365 Exchange Online
Mail.ReadWrite
Read and write mail in all mailboxes.
application
Office 365 Exchange Online
Calendars.ReadWrite.All
Read and write calendars in all mailboxes.
application
Office 365 Exchange Online
delegated
Office 365 Exchange Online
full_access_as_app
Use Exchange Web Services (EWS) with full access to all mailboxes.
application
Office 365 Exchange Online
Mail.ReadWrite
Read and write mail in all mailboxes.
application
Office 365 Exchange Online
Calendars.ReadWrite.All
Read and write calendars in all mailboxes.
application
Office 365 Exchange Online
delegated
Microsoft Graph
offline_access
Maintain access to data you have granted access to.
delegated
Microsoft Graph
profile
View user's basic profile.
delegated
Microsoft Graph
openid
Sign users in.
delegated
Microsoft Graph
User.ReadWrite.All
Read and write all users' full profile information.
application
Microsoft Graph
Application.ReadWrite.All
Read and write all applications.
application
Microsoft Graph
Group.Read.All
Read all groups.
application
Microsoft Graph
Contacts.ReadWrite
Read and write contacts in all mailboxes.
application
Microsoft Graph
Group.Create
Create groups.
application
Microsoft Graph
Files.ReadWrite.All
Read and write files in all site collections.
application
Microsoft Graph
Calendars.ReadWrite
Read and write calendars in all mailboxes.
application
Microsoft Graph
Tasks.ReadWrite
Create, read, update, and delete user's tasks and task lists.
delegated
Microsoft Graph
Directory.ReadWrite.All
Read and write directory data.
delegated
Microsoft Graph
Group.ReadWrite.All
Read and write all groups.
delegated
Microsoft Graph
offline_access
Maintain access to data you have granted access to.
delegated
Overview of Microsoft 365 resources protected by backup, including applications such as Microsoft Exchange, OneDrive, and SharePoint.
Microsoft 365 protected resources define which parts of the environment GitProtect can access, backup, and restore.
The following list includes all Microsoft 365 resources covered by backup.