Set up Microsoft 365 admin account to protect Groups and Teams using Cloud Application Backup

To activate backup task for Microsoft 365 Groups and Teams, you must set up a Microsoft 365 admin account that have the application impersonation permission, and is a member of the Organization Management and the Discovery Management role groups. For this:

1. Sign in to the Exchange admin center with your Microsoft 365 admin account.

2. In the Exchange admin center, go to Roles › Admin roles.

   

3. On the Admin roles page, click the Discovery Management role group.

   

   In the role group settings dialog:

   1. Go to the Assigned tab, and check if the admin account you plan to use for the Exchange backup belongs to the role group.

      If not, add the admin account to the role group.

      

   2. Go to the Permissions tab, and then select the ApplicationImpersonation role.

      

   3. Click Save to apply changes, and then click Close () to close the dialog.

4. On the Admin roles page, click the Organization Management role group.

   

   In the role group settings dialog:

   1. Go to the Assigned tab, and check if the admin account you plan to use for the Exchange backup belongs to the role group.

      If not, add the admin account to the role group.

      

   2. Go to the Permissions tab, and then select the ApplicationImpersonation role.

      

   3. Click Save to apply changes.

If you use multi-factor authentication for Microsoft 365, you need to create an app password for your Microsoft 365 admin account, and use it to authenticate your CAB backups.