sodcalculator

10 Tech How-To

Veeam Microsoft 365 Backup: Requirements & Setup

Guide 10-8358 · Updated · Step by step

Veeam Backup for Microsoft 365 protects Exchange Online, SharePoint Online, OneDrive for Business, and Teams data by copying it to your own storage. To set it up, you need a Windows server (or VM) with at least 4 CPU cores, 8 GB RAM, and enough disk space for the backups, plus a Microsoft 365 tenant with an account that has the required admin roles and an application registration in Azure AD. This article covers the full prerequisites, licensing model, step-by-step installation, and common setup pitfalls.

Background: Why Veeam for M365?

Microsoft’s native retention and litigation hold features are not the same as a backup. They protect against accidental deletion and legal discovery, but they do not protect against ransomware that encrypts your tenant, a rogue admin who purges data, or a sync error that propagates deletions across all users. Veeam Backup for Microsoft 365 gives you an independent copy of your cloud data that you control, store, and restore from without depending on Microsoft’s retention windows.

Veeam has offered this product since 2016, originally as a free tool called Veeam Backup for Microsoft Office 365. It has evolved into a full commercial product that is included in Veeam Universal License (VUL) and also available as a standalone subscription. The core architecture is simple: a Windows-based backup server connects to Microsoft Graph APIs, pulls the data, and stores it in a repository you choose—local disk, network share, or object storage like S3-compatible services.

Licensing: What Do You Need to Buy?

Veeam Backup for Microsoft 365 is licensed per user, per year. You need one license for each user whose data you back up, regardless of how many services (Exchange, OneDrive, SharePoint, Teams) you protect for that user. There is no separate license for devices or servers.

Licenses are sold as:

  • Veeam Universal License (VUL) – a portable license that can be used for any Veeam product, including Veeam Backup & Replication and Veeam Backup for Microsoft 365. This is the most flexible option if you also back up on-premises workloads.
  • Standalone subscription – dedicated to Microsoft 365 backups only. Cheaper if you do not need other Veeam products.

There is a free community edition that supports up to 10 users, but it lacks some advanced features like eDiscovery and legal hold. For production environments, you will almost always need a paid subscription. Veeam also offers a 30-day trial with full functionality, which is the best way to test the setup before buying.

System Requirements: Server and Storage

The backup server runs the Veeam Backup for Microsoft 365 console and proxy services. It must be a Windows Server 2016 or later (or Windows 10/11 for testing), with the .NET Framework 4.8 installed. The minimum hardware is 4 CPU cores and 8 GB RAM, but these are bare minimums—for production, plan for 8 cores and 16 GB RAM, plus more if you have more than a few hundred users.

Storage is the biggest planning factor. The amount of space you need depends on the size of your mailboxes, OneDrive accounts, and SharePoint sites, plus the retention period you want. A common rule of thumb is to allocate 1.5 to 2 times the size of your current Microsoft 365 data to account for version history and growth. For example, if your tenant has 100 GB of mailboxes and 50 GB of OneDrive data, plan for at least 225 GB of backup storage.

You can use local disks, a NAS, or object storage (S3, Azure Blob, etc.) as the repository. Object storage is popular because it is cheap and scalable, but note that Veeam requires a gateway server to write to object storage—the backup server itself can act as that gateway.

Prerequisites: Microsoft 365 Tenant and Permissions

Before installation, you need to prepare your Microsoft 365 tenant. Veeam uses an Azure AD application to authenticate and access data via Graph APIs. You must have a global administrator account to create this app registration and grant the required permissions.

The essential steps are:

  1. Register an application in Azure AD (or use the Veeam wizard to do it automatically).
  2. Grant the application the following API permissions: Mail.Read, MailboxSettings.Read, Calendars.Read, Contacts.Read, Sites.Read.All, Files.Read.All, User.Read.All, Group.Read.All, and offline_access.
  3. Grant admin consent for the tenant.
  4. Create a service account (or use the global admin) that Veeam will use to connect. This account must have the Global Admin or Exchange Administrator and SharePoint Administrator roles, plus the User Management Administrator role to enumerate users.

If you skip any of these permissions, the backup will fail with cryptic errors like “Access denied” or “Insufficient privileges.” The Veeam wizard has a built-in test that checks all permissions before you proceed, so run it and fix any warnings.

Installation and Setup: Step-by-Step

Once your server is ready and your tenant permissions are in place, the installation process is straightforward:

  1. Download the installer from Veeam’s website and run it on your Windows server.
  2. Choose the components: Backup Server, Backup Proxy, and Console. For a single-server setup, install all three on the same machine.
  3. After installation, open the Veeam Backup for Microsoft 365 console and add your Microsoft 365 organization. You will be prompted to sign in with an account that has Global Admin rights.
  4. Follow the wizard to create the Azure AD application and grant permissions. The wizard will also ask which services you want to protect (Exchange, SharePoint, OneDrive, Teams).
  5. Create a backup repository: select a local folder, network share, or object storage. For object storage, you will need to provide the endpoint and credentials.
  6. Create a backup job: choose the organization, select the services and users (or use the “All users” option), set the schedule (e.g., daily at 8 PM), and define the retention policy (e.g., 14 days of restore points).
  7. Run the job manually the first time to verify everything works, then let the schedule take over.

After the first backup, you can test restores by right-clicking a mailbox or site and choosing “Restore.” Always test a restore early to confirm your backups are usable.

Common Problems and How to Avoid Them

Several issues surface frequently during setup:

  • Graph API throttling – Microsoft limits the number of requests per app. Veeam handles this with built-in retries, but if you have more than 10,000 users, you may need to adjust the throttling settings or spread backups across multiple proxies.
  • Slow initial backup – The first backup copies everything, so it can take days for large tenants. Plan the initial backup over a weekend and consider using Veeam’s “seed” feature if you have a very large dataset.
  • License not recognized – If you install the trial and later add a license, you must restart the Veeam services. Also, ensure the license is assigned to the correct server in the Veeam License Portal.
  • Restore to original location fails – This often happens when the restore point is too old or the user has been deleted. Use the “Restore to a different location” option and then manually merge data.

One misconception is that Veeam backs up Teams chats and channel messages. It does, but only if you enable the Teams option in the job and have the required permissions. Also, note that private channel messages are stored in SharePoint, so they are covered by the SharePoint backup, not the Teams backup.

Comparison: Veeam vs. Native Microsoft 365 Backup

Microsoft now offers its own backup service (Microsoft 365 Backup) as an add-on. The main differences are:

  • Storage location – Microsoft stores backups in their own data centers; Veeam stores them in your chosen repository.
  • Granularity – Veeam allows item-level restores (a single email, file, or site) with a few clicks. Microsoft’s service also does item-level, but some users find the interface less intuitive.
  • Cost – Microsoft’s backup is per-user per-month and includes storage. Veeam’s licensing is per-user per-year, but you pay for storage separately. For large tenants, Veeam can be cheaper, especially if you already have VUL.
  • Long-term retention – Veeam lets you keep backups for years on cheap object storage. Microsoft’s service currently offers up to 5 years, but you pay for that storage.

If you are already a Veeam shop, the integration with Veeam Backup & Replication is a big advantage—you can manage all backups from one console. If you want a simple, all-in-one solution with no extra infrastructure, Microsoft’s native backup might be enough.

Frequently Asked Questions

Can I back up Microsoft 365 to a NAS or external drive?

Yes. Veeam supports any SMB share or locally attached disk as a repository. For a NAS, ensure it supports SMB 3.0 and has enough space. For external drives, they work but are not recommended for long-term retention due to reliability concerns.

Does Veeam back up Teams and SharePoint?

Yes, Veeam backs up Teams (including chats, channels, and files) and SharePoint sites (including document libraries, lists, and pages). You must enable these services in the backup job and have the appropriate licenses for all users who are members of the team or site.

How long does the initial backup take?

It depends on the amount of data and your internet bandwidth. A rough estimate: 1 GB of mailbox data takes about 10-15 minutes with a 100 Mbps connection, but this can vary. Veeam uses multiple threads and compression, so actual speed may be faster. Plan for at least a day for 100 GB of data.

Can I restore a single email without restoring the whole mailbox?

Yes. Veeam allows item-level recovery. You can browse a mailbox backup, select specific emails, and export them to PST or restore directly to the mailbox. This is a core feature and works for OneDrive files and SharePoint items as well.

What happens if my Microsoft 365 subscription expires?

Veeam will stop backing up new data, but your existing backups remain intact and restorable. Once you renew your Microsoft 365 subscription, backups resume automatically. Your Veeam license is independent of your Microsoft 365 subscription.

Is there a free version?

Yes, Veeam Backup for Microsoft 365 Community Edition is free for up to 10 users and includes all core features. It lacks some advanced capabilities like eDiscovery and legal hold, but it is a good way to test the product or protect a small business.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →