Adding a Microsoft 365 tenant to Xopero ONE connects your organization's environment and enables data protection for supported services. The integration requires proper authorization and tenant-level permissions to establish a secure connection between Microsoft 365 and Xopero ONE, allowing you to configure backup settings, manage protection policies, and perform recovery operations.

Important notice

The following documentation applies only to Microsoft 365 organizations with Xopero ONE licenses that include backup for Microsoft Exchange data (including individual mailboxes, shared mailboxes, calendars, and contacts) and OneDrive.

For instructions on enabling protection for SharePoint sites in new and existing Microsoft 365 organizations, refer to the Enabling SharePoint protection in Xopero ONE article.

Integration process

The below steps demonstrate how to integrate a Microsoft 365 organization with Xopero ONE using Xopero ONE Management Service.

After adding the organization, you may see the following message. Click Repair to configure permissions for shared mailbox protection.

To start the permission update process, click Continue at the bottom of the configuration pane. If prompted, sign in to your Microsoft 365 account and grant Xopero ONE the required permissions.

After the required permissions have been granted, you can configure a Microsoft 365 backup plan and start protecting your resources.

The required Microsoft 365 permissions define the access levels Xopero ONE needs to securely back up and restore your data.

General requirements

To integrate a Microsoft 365 organization with Xopero ONE, ensure it uses a Microsoft 365 business license.

To back up a single Microsoft 365 account, the account must have a Microsoft 365 license assigned. This also applies to shared mailboxes. License assignments can be managed in the Microsoft 365 admin center.

Each Microsoft 365 account and shared mailbox requires one Xopero ONE license to back up its data.

The backup process requires a backup agent (worker), which communicates with the Microsoft 365 API, downloads the requested data, and performs the backup. You can use either a cloud or local worker. Any device with the Xopero ONE Backup&Recovery Agent installed can act as a worker.

To add your Microsoft 365 organization to Xopero ONE, you must use a global administrator account. Only a global administrator has the necessary permissions to back up data from all user accounts in the organization.

The following tables list Xopero apps and their permissions, which are automatically installed in the end user's Entra ID when integrating Microsoft 365 with Xopero ONE.

This application is used at the beginning of the integration to install and grant the necessary permissions for the Xopero ONE MS365 PRO app.

This application is required to back up and recover data from Microsoft 365 tenants and is installed automatically in Entra ID by Xopero ONE Registrator.

Enabling SharePoint protection in Xopero ONE allows SharePoint sites to be included in the Microsoft 365 backup scope. The setup follows the same tenant-based flow used for other Microsoft 365 resources and requires that the necessary prerequisites and permissions are in place before backup configuration is started.

Important notice

The following documentation applies only to Microsoft 365 organizations with Xopero ONE licenses (Microsoft 365 PRO) that include backup for Microsoft Exchange data (including individual mailboxes, shared mailboxes, calendars, and contacts), SharePoint, and OneDrive.

For instructions on adding Microsoft 365 tenants with only Microsoft Exchange and OneDrive protection to Xopero ONE, see this article.

The below steps demonstrate how to integrate a Microsoft 365 organization with Xopero ONE using Xopero ONE Management Service.

The following steps demonstrate how to enable SharePoint protection for existing Microsoft 365 organizations using Xopero ONE Management Service.